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Chapter 1: Getting started with PowerShell 


Version Included with Windows Notes Release Date 
1.0 XP / Server 2008 2006-11-01 
2.0 7 / Server 2008 R2 2009-11-01 
3.0 8 / Server 2012 2012-08-01 
4.0 8.1 / Server 2012 R2 2013-11-01 
5.0 10 / Server 2016 Tech Preview 2015-12-16 
5a, 10 Anniversary edition / Server 2016 2017-01-27 


saa 1.1: Allow scripts stored on your machine to run un- 
signe 


For security reasons, PowerShell is set up by default to only allow signed scripts to execute. Executing the following 
command will allow you to run unsigned scripts (you must run PowerShell as Administrator to do this). 


Set-ExecutionPolicy RemoteSigned 
Another way to run PowerShell scripts is to use Bypass aS ExecutionPolicy: 
powershell.exe -ExecutionPolicy Bypass -File "c:\MyScript.ps1" 
Or from within your existing PowerShell console or ISE session by running: 


Set-ExecutionPolicy Bypass Process 


A temporary workaround for execution policy can also be achieved by running the PowerShell executable and 
passing any valid policy as -ExecutionPolicy parameter. The policy is in effect only during process' lifetime, so no 
administrative access to the registry is needed. 


C:\>powershell -ExecutionPolicy RemoteSigned 


There are multiple other policies available, and sites online often encourage you to use Set-ExecutionPolicy 
Unrestricted. This policy stays in place until changed, and lowers the system security stance. This is not advisable. 
Use of RemoteSigned is recommended because it allows locally stored and written code, and requires remotely 
acquired code be signed with a certificate from a trusted root. 


Also, beware that the Execution Policy may be enforced by Group Policy, so that even if the policy is changed to 
Unrestricted system-wide, Group Policy may revert that setting at its next enforcement interval (typically 15 
minutes). You can see the execution policy set at the various scopes using Get-ExecutionPolicy -List 


TechNet Documentation: 
Set-ExecutionPolicy 
about Execution Policies 


Section 1.2: Aliases & Similar Functions 


In PowerShell, there are many ways to achieve the same result. This can be illustrated nicely with the simple & 
familiar Hello World example: 


Using Write-Host: 
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Write-Host "Hello World" 
Using Write-Output: 
Write-Output ‘Hello world' 


It's worth noting that although Write-Output & Write-Host both write to the screen there is a subtle difference. 
Write-Host writes only to stdout (i.e. the console screen), whereas Write-Output writes to both stdout AND to the 
output [success] stream allowing for redirection. Redirection (and streams in general) allow for the output of one 
command to be directed as input to another including assignment to a variable. 


Smessage = Write-Output "Hello World" 
> Smessage 
"Hello World" 


These similar functions are not aliases, but can produce the same results if one wants to avoid "polluting" the 
success stream. 


Write-Output is aliased to Echo or Write 


Echo ‘Hello world' 
Write ‘Hello world' 


Or, by simply typing ‘Hello world"! 

"Hello world’ 
All of which will result with the expected console output 
Hello world 


Another example of aliases in PowerShell is the common mapping of both older command prompt commands and 
BASH commands to PowerShell cmdlets. All of the following produce a directory listing of the current directory. 


C:\Windows> dir 
C:\Windows> ls 
C:\Windows> Get-ChildItem 


Finally, you can create your own alias with the Set-Alias cmdlet! As an example let's alisas Test-NetConnection, 
which is essentially the PowerShell equivalent to the command prompt's ping command, to "ping". 


Set-Alias -Name ping -Value Test-NetConnection 


Now you can use ping instead of Test-NetConnection! Be aware that if the alias is already in use, you'll overwrite 
the association. 


The Alias will be alive, till the session is active. Once you close the session and try to run the alias which you have 
created in your last session, it will not work. To overcome this issue, you can import all your aliases from an excel 
into your session once, before starting your work. 


Section 1.3: The Pipeline - Using Output from a PowerShell 
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cmdlet 


One of the first questions people have when they begin to use PowerShell for scripting is how to manipulate the 
output from a cmdlet to perform another action. 


The pipeline symbol | is used at the end of a cmdlet to take the data it exports and feed it to the next cmdlet. A 
simple example is using Select-Object to only show the Name property of a file shown from Get-Childitem: 


Get-ChildItem | Select-Object Name 
#This may be shortened to: 
gci | Select Name 


More advanced usage of the pipeline allows us to pipe the output of a cmdlet into a foreach loop: 


Get-ChildItem | ForEach-Object { 
Copy-Item -Path $_.FullName -destination C:\NewDirectory\ 


} 


#This may be shortened to: 
gci | % { Copy $_.FullName C:\NewDirectory\ } 


Note that the example above uses the $_ automatic variable. $_ is the short alias of $PSltem which is an automatic 
variable which contains the current item in the pipeline. 


Section 1.4: Calling .Net Library Methods 


Static .Net library methods can be called from PowerShell by encapsulating the full class name in third bracket and 
then calling the method using :: 


#calling Path.GetFileName() 
C:\> [System.I0.Path] ::GetFileName('C:\Windows\explorer .exe' ) 
explorer.exe 


Static methods can be called from the class itself, but calling non-static methods requires an instance of the .Net 
class (an object). 


For example, the AddHours method cannot be called from the System.DateTime class itself. It requires an instance 
of the class: 


C:\> [System.DateTime] : :AddHours(15) 

Method invocation failed because [System.DateTime] does not contain a method named ‘AddHours'. 
At line:1 char:1 

+ [System.DateTime] : :AddHours(15) 


RRR RR RR RR RR RR RR RI RR IR I RI RI RRR 


+ CategoryInfo : InvalidOperation: (:) [], RuntimeException 
+ FullyQualifiedErrorId : MethodNotFound 


In this case, we first create an object, for example: 
C:\> SObject = [System.DateTime] : :Now 


Then, we can use methods of that object, even methods which cannot be called directly from the System.DateTime 
class, like the AddHours method: 


C:\> SObject.AddHours(15) 
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Section 1.5: Installation or Setup 
Windows 


PowerShell is included with the Windows Management Framework. Installation and Setup are not required on 
modern versions of Windows. 


Updates to PowerShell can be accomplished by installing a newer version of the Windows Management Framework. 
Other Platforms 
PowerShell 6 can be installed on other platforms. The installation packages are available here. 


For example, PowerShell 6, for Ubuntu 16.04, is published to package repositories for easy installation (and 
updates). 


To install run the following: 


# Import the public repository GPG keys 
curl https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add - 


# Register the Microsoft Ubuntu repository 
curl https://packages.microsoft.com/config/ubuntu/16.04/prod.list | sudo tee 
/etc/apt/sources.list.d/microsoft.list 


# Update apt-get 
sudo apt-get update 


# Install PowerShell 
sudo apt-get install -y powershell 


# Start PowerShell 
powershell 


After registering the Microsoft repository once as superuser, from then on, you just need to use sudo apt-get 
upgrade powershe11 to update it. Then just run powershell 


Section 1.6: Commenting 


To comment on power scripts by prepending the line using the # (hash) symbol 


# This is a comment in PowerShell 
Get-ChildItem 


You can also have multi-line comments using <# and #> at the beginning and end of the comment respectively. 


<# 

This is a 
multi-line 
comment 

#> 
Get-ChildItem 
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Section 1.7: Creating Objects 
The New-Object cmdlet is used to create an object. 


# Create a DateTime object and stores the object in variable "Svar" 
Svar = New-Object System.DateTime 


# calling constructor with parameters 
Ssr = New-Object System.I0.StreamReader -ArgumentList "file path" 


In many instances, a new object will be created in order to export data or pass it to another commandlet. This can 
be done like so: 


SnewObject = New-Object -TypeName PSObject -Property @{ 
ComputerName = "SERVER1" 
Role = "Interface" 
Environment = "Production" 


There are many ways of creating an object. The following method is probably the shortest and fastest way to create 
a PSCustomObject: 


SnewObject = [PSCustomObject]@{ 
ComputerName = 'SERVER1' 
Role = 'Interface' 
Environment = ‘Production’ 


In case you already have an object, but you only need one or two extra properties, you can simply add that 
property by using Select Object: 


Get-ChildiItem | Select-Object FullName, Name, 
@{Name='DateTime'; Expression={Get-Date}}, 
@{Name='PropertyName'; Expression={'CustomValue' }} 


All objects can be stored in variables or passed into the pipeline. You could also add these objects to a collection 
and then show the results at the end. 


Collections of objects work well with Export-CSV (and Import-CSV). Each line of the CSV is an object, each column a 
property. 


Format commands convert objects into text stream for display. Avoid using Format-* commands until the final step 
of any data processing, to maintain the usability of the objects. 
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Chapter 2: Variables in PowerShell 


Variables are used for storing values. Let the value be of any type , we need to store it somewhere so that we can 
use it throughout the console/script. Variable names in PowerShell begin with a $, as in $Variable1, and values are 
assigned using =, like $Variable1 = "Value 1".PowerShell supports a huge number of variable types; such as text 

strings, integers, decimals, arrays, and even advanced types like version numbers or IP addresses. 


Section 2.1: Simple variable 
All variables in PowerShell begin with a US dollar sign (S$). The simplest example of this is: 


S$foo = "bar" 


This statement allocates a variable called foo with a string value of "bar". 


Section 2.2: Arrays 


Array declaration in Powershell is almost the same as instantiating any other variable, i.e. you use a Sname = syntax. 
The items in the array are declared by separating them by commas(, ): 


SmyArrayOfInts = 1,2,3,4 
SmyArrayOfStrings = "1","2","3","4" 


Adding to an array 
Adding to an array is as simple as using the + operator: 


SmyArrayOfInts 


= SmyArrayOfInts + 5 
# now contains 1,2,3 


,4 8&5! 


Combining arrays together 

Again this is as simple as using the + operator 
SmyArrayOfInts = 1,2,3,4 
SmyOtherArrayOfInts = 5,6,7 


SmyArrayOfInts = SmyArrayOfInts + SmyOtherArrayOfInts 
#OMOW 1.20: 4.5 Omer 


Section 2.3: List Assignment of Multiple Variables 


Powershell allows multiple assignment of variables and treats almost everything like an array or list. This means 
that instead of doing something like this: 

Sinput = "foo.bar.baz" 

Sparts = Sinput.Split(".") 

Sfoo = Sparts[@] 


Sbar = Sparts[1] 
Sbaz = Sparts[2] 


You can simply do this: 
Sfoo, Sbar, Sbaz = Sinput.Split(".") 


Goalkicker.com - PowerShell® Notes for Professionals Zz 


Since Powershell treats assignments in this manner like lists, if there are more values in the list than items in your 
list of variables to assign them to, the last variable becomes an array of the remaining values. This means you can 
also do things like this: 


Sfoo, S$leftover = Sinput.Split(".") #Sets Sfoo = "foo", Sleftover = ["“bar", "baz"] 
Sbar = Sleftover[@] # Sbar = "bar" 
Sbaz = Sleftover[1] # Sbaz = "baz" 


Section 2.4: Scope 


The default scope for a variable is the enclosing container. If outside a script, or other container then the scope is 
Global. To specify a scope, it is prefixed to the variable name Sscope:varname like so: 


Sfoo = "Global Scope" 

function myFunc { 
Sfoo = "Function (local) scope" 
Write-Host Sglobal: foo 
Write-Host $local:foo 
Write-Host $foo 


} 

myFunc 

Write-Host Slocal:foo 
Write-Host Sfoo 


Output: 


Global Scope Function (local) scope Function (local) scope Global Scope Global Scope 


Section 2.5: Removing a variable 


To remove a variable from memory, one can use the Remove-Item cmdlet. Note: The variable name does NOT 
include the §$. 


Remove-Item Variable: \foo 


Variable has a provider to allow most *-item cmdlets to work much like file systems. 
Another method to remove variable is to use Remove-Variable cmdlet and its alias rv 


Svar = "Some Variable" #Define variable ‘var’ containing the string ‘Some Variable’ 
Svar #For test and show string 'Some Variable’ on the console 


Remove-Variable -Name var 
Svar 


#also can use alias ‘rv 
rv var 
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Chapter 3: Operators 


An operator is a character that represents an action. It tells the compiler/interpreter to perform specific 
mathematical, relational or logical operation and produce final result. PowerShell interprets in a specific way and 
categorizes accordingly like arithmetic operators perform operations primarily on numbers, but they also affect 
strings and other data types. Along with the basic operators, PowerShell has a number of operators that save time 
and coding effort (eg: -like, - match, -replace, etc). 


Section 3.1: Comparison Operators 


PowerShell comparison operators are comprised of a leading dash (-) followed by a name (eq for equal, gt for 
greater than, etc...). 


Names can be preceded by special characters to modify the behavior of the operator: 


i # Case-Insensitive Explicit (-ieq) 
c # Case-Sensitive Explicit (-ceq) 


Case-Insensitive is the default if not specified, ("a" -eq "A") same as ("a" -ieq "A"). 


Simple comparison operators: 


2 -eq 2 # Equal to (== 

2 -ne 4 # Not equal to (!=) 

5 =Gitez # Greater-than (>) 

5 -ge 5 # Greater-than or equal to (>=) 
5 -1t 10 # Less-than (<) 

5 -le 5 # Less-than or equal to (<=) 


String comparison operators: 


"MyString" -like "*String" # Match using the wildcard character (*) 

"MyString" -notlike "Other" # Does not match using the wildcard character (*) 
"MyString" -match '“String$' # Matches a string using regular expressions 
"MyString"” -notmatch 'OtherS' # Does not match a string using regular expressions 


Collection comparison operators: 


"abc", "def" -contains "def" Returns true when the value (right) is present 
in the array (left) 
"abc", "def" -notcontains "123" Returns true when the value (right) is not present 


in the array (left) 

Returns true when the value (left) is present 

in the array (right) 

Returns true when the value (left) is not present 
in the array (right) 


"def" -in “abc", "def" 


"723" —Hetin "abe", “det" 


He RH HH HH H 


Section 3.2: Arithmetic Operators 


+ 


2 Addition 
- 2 


Subtraction 

Set negative value 
Multiplication 
Division 

Modulus 


He oR HHH 
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106 -shl 2 # Bitwise Shift-left 
100 -shr 1 # Bitwise Shift-right 


Section 3.3: Assignment Operators 


Simple arithmetic: 


SVaie t= al 
Svar t= 2 
Svar -= 1 
Svar *= 2 
Svar /= 2 
Svan 4=—2 


He RH HHH H 


Assignment. Sets the value of a variable to the specified value 

Addition. Increases the value of a variable by the specified value 
Subtraction. Decreases the value of a variable by the specified value 
Multiplication. Multiplies the value of a variable by the specified value 
Division. Divides the value of a variable by the specified value 

Modulus. Divides the value of a variable by the specified value and then 
assigns the remainder (modulus) to the variable 


Increment and decrement: 


Svar++ # Increases the value of a variable, assignable property, or array element by 1 
Svar-- # Decreases the value of a variable, assignable property, or array element by 1 


Section 3.4: Redirection Operators 


Success output stream: 


cmdlet > file 
cmdlet >> file 
cmdlet 1>&2 


# Send success output to file, overwriting existing content 
# Send success output to file, appending to existing content 
# Send success and error output to error stream 


Error output stream: 


cmdlet 2> file 
cmdlet 2>> file 
ecmdlet 2>&1 


# Send error output to file, overwriting existing content 
# Send error output to file, appending to existing content 
# Send success and error output to success output stream 


Warning output stream: (PowerShell 3.0+) 


cmdlet 3> file 
cmdlet 3>> file 
cmdlet 3>&1 


# Send warning output to file, overwriting existing content 
# Send warning output to file, appending to existing content 
# Send success and warning output to success output stream 


Verbose output stream: (PowerShell 3.0+) 


cmdlet 4> file 
cmdlet 4>> file 
ecmdlet 4>&1 


# Send verbose output to file, overwriting existing content 
# Send verbose output to file, appending to existing content 
# Send success and verbose output to success output stream 


Debug output stream: (PowerShell 3.0+) 


cmdlet 5> file 
cmdlet 5>> file 
cmdlet 5>&1 


# Send debug output to file, overwriting existing content 
# Send debug output to file, appending to existing content 
# Send success and debug output to success output stream 


Information output stream: (PowerShell 5.0+) 


cmdlet 6> file 
cmdlet 6>> file 


# Send information output to file, overwriting existing content 
# Send information output to file, appending to existing content 
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cmdlet 6>&1 # Send success and information output to success output stream 


All output streams: 


cmdlet *> file # Send all output streams to file, overwriting existing content 
cmdlet *>> file # Send all output streams to file, appending to existing content 
cmdlet *>&1 # Send all output streams to success output stream 


Differences to the pipe operator (|) 


Redirection operators only redirect streams to files or streams to streams. The pipe operator pumps an object 
down the pipeline to a cmdlet or the output. How the pipeline works differs in general from how redirection works 
and can be read on Working with the PowerShell pipeline 


Section 3.5: Mixing operand types, the type of the left 
operand dictates the behavior 


For Addition 


DEE ena # Gives "42" 

ee ape # Gives 6 

1,2,3 + "Hello" # Gives 1,2,3, “Hello” 
"Hello" + 1,2,3 # Gives "Hellol 2 3" 


For Multiplication 


NO ke 2 ee He OIVCSEaeSOty 

ese # Gives 6 

* 2 -# Gives 1//2;,3; 1), 2,3 

,2,3 # Gives an error op_Multiply is missing 


The impact may have hidden consequences on comparison operators: 


Sa = Read-Host "Enter a number" 
Enter a number : 33 

Sa -gt 5 

False 


Section 3.6: Logical Operators 


-and # Logical and 
-or # Logical or 
-xor # Logical exclusive or 
-not # Logical not 
! # Logical not 


Section 3.7: String Manipulation Operators 


Replace operator: 


The - replace operator replaces a pattern in an input value using a regular expression. This operator uses two 
arguments (separated by a comma): a regular expression pattern and its replacement value (which is optional and 
an empty string by default). 


"The rain in Seattle" -replace ‘rain’, ‘hail’ #Returns: The hail in Seattle 
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“kenmyer@contoso.com" -replace '4[\w]+@(.+)', '$1'  #Returns: contoso.com 
Split and Join operators: 
The -split operator splits a string into an array of sub-strings. 

WAG BaGe— Spileict sau #Returns an array string collection object containing A,B and C. 
The - join operator joins an array of strings into a single string. 


Meloy |e gece sgkebua 8 #Returns a single string: E:F:G 
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Chapter 4: Special Operators 


Section 4.1: Array Expression Operator 
Returns the expression as an array. 

@(Get-ChildItem Senv:windir\System32\ntdl1.d11) 

Will return an array with one item 


@(Get-ChildItem Senv:windir\System32) 


Will return an array with all the items in the folder (which is not a change of behavior from the inner expression. 


Section 4.2: Call Operation 


Scommand = 'Get-ChildItem' 
& SCommand 


Will execute Get-ChildItem 


Section 4.3: Dot sourcing operator 


. .\myScript.ps1 


runs .\myScript.ps1 in the current scope making any functions, and variable available in the current scope. 
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Chapter 5: Basic Set Operations 


A set is a collection of items which can be anything. Whatever operator we need to work on these sets are in short 
the set operators and the operation is also known as set operation. Basic set operation includes Union, Intersection 


as well as addition, subtraction, etc. 


Section 5.1: Filtering: Where-Object / where / ? 


Filter an enumeration by using a conditional expression 
Synonyms: 


Where-Object 


where 
? 


Example: 


Snames = @( "Aaron", "Albert", "Alphonse", "Bernie", 


Snames | Where-Object { S_ -like "Ax" } 
Snames | where { $_ -like "Ax" } 
Snames | ? { S_ -like "Ax" } 


Returns: 
Aaron 


Albert 
Alphonse 


"Charlie", "Danny", "Ernie", 


Section 5.2: Ordering: Sort-Object / sort 


Sort an enumeration in either ascending or descending order 


Synonyms: 


Sort-Object 
sort 


Assuming: 
Snames = @( "Aaron", “Aaron”, "Bernie", "Charlie", 
Ascending sort is the default: 


Snames | Sort-Object 
Snames | sort 


Aaron 
Aaron 
Bernie 
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"Danny" ) 


"Frank") 
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Charlie 
Danny 


To request descending order: 


Snames | Sort-Object -Descending 
Snames | sort -Descending 


Danny 
Charlie 
Bernie 
Aaron 
Aaron 


You can sort using an expression. 


Snames | Sort-Object { $_.length } 


Aaron 
Aaron 
Danny 
Bernie 
Charlie 


Section 5.3: Grouping: Group-Object / group 
You can group an enumeration based on an expression. 
Synonyms: 


Group-Object 
group 


Examples: 


Snames = @( "Aaron", "Albert", "Alphonse", 


Snames | Group-Object -Property Length 
Snames | group -Property Length 


Response: 


Count Name Group 
4 5 {Aaron, Danny, Ernie, Frank} 


2 6 {Albert, Bernie} 
1 8 {Alphonse} 
1 7 {Charlie} 
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Bernie", "Charlie", "Danny", "Ernie", 


"Frank" ) 


Section 5.4: Projecting: Select-Object / select 


Projecting an enumeration allows you to extract specific members of each object, to extract all the details, or to 
compute values for each object 


Synonyms: 


Select Object 
SELECT 


Selecting a subset of the properties: 


Sdit=-din 2¢:\Myrolder: 
Sdir | Select-Object Name, FullName, Attributes 
Sdir | select Name, FullName, Attributes 


Name FullName Attributes 
Images C:\MyFolder\lmages Directory 


data.txt C:\MyFolder\data.txt Archive 
source.c C:\MyFolder\source.c Archive 


Selecting the first element, and show all its properties: 


Sd | select -first 1 * 


PSPath 
PSParentPath 
PSChildName 
PSDrive 
PSProvider 
PSIsContainer 
BaseName 
Mode 

Name 

Parent 

Exists 

Root 

FullName 
Extension 
CreationTime 
CreationTimeUtc 
LastAccessTime 
LastAccessTimeUtc 
LastWriteTime 
LastWriteTimeUtc 
Attributes 
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Chapter 6: Conditional logic 


Section 6.1: if, else and else if 


Powershell supports standard conditional logic operators, much like many programming languages. These allow 
certain functions or commands to be run under particular circumstances. 


With an if the commands inside the brackets ({}) are only executed if the conditions inside the if(()) are met 


Stest = "test" 
if (Stest -eq "test") { 
Write-Host "if condition met" 


} 
You can also do an else. Here the else commands are executed if the if conditions are not met: 


Stest = ctest. 
if (Stest -eq "test2"){ 
Write-Host "if condition met" 


} 
else{ 

Write-Host "if condition not met" 
} 


or an elseif. An else if runs the commands if the if conditions are not met and the elseif conditions are met: 


Stest = "test" 
if (Stest -eq "test2"){ 
Write-Host "if condition met" 


} 
elseif (Stest -eq "test"){ 
Write-Host "ifelse condition met" 


} 


Note the above use -eq(equality) CmdLet and not = or == as many other languages do for equality. 


Section 6.2: Negation 


You may want to negate a boolean value, i.e. enter an if statement when a condition is false rather than true. This 
can be done by using the -Not CmdLet 


Stest = "test" 
if (-Not Stest -eq "test2"){ 
Write-Host "if condition not met" 


} 


You can also use !: 


Stest = "test" 
if ('(Stest -eq "test2")){ 
Write-Host "if condition not met" 


} 


there is also the -ne (not equal) operator: 
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Stest-— 5 test. 
if (Stest -ne "test2"){ 
Write-Host "variable test is not equal to ‘'test2'" 


} 


Section 6.3: If conditional shorthand 


If you want to use the shorthand you can make use of conditional logic with the following shorthand. Only the 
string ‘false’ will evaluate to true (2.0). 


#Done in Powershell 2.0 
Sboolean = Sfalse; 
Sstring = ‘false: 
SemptyString = ""; 
If (Sboolean) { 

# this does not run because Sboolean is false 

Write-Host "Shorthand If conditions can be nice, just make sure they are always boolean." 


} 


If(Sstring) { 
# This does run because the string is non-zero length 


Write-Host "If the variable is not strictly null or Boolean false, it will evaluate to true as 
it is an object or string with length greater than 9." 


: 
If(SemptyString) { 
# This does not run because the string is zero-length 
Write-Host "Checking empty strings can be useful as well." 
} 
If(Snul11) { 
# This does not run because the condition is null 
Write-Host "Checking Nulls will not print this statement." 
} 
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Chapter 7: Loops 


A loop is a sequence of instruction(s) that is continually repeated until a certain condition is reached. Being able to 
have your program repeatedly execute a block of code is one of the most basic but useful tasks in programming. A 
loop lets you write a very simple statement to produce a significantly greater result simply by repetition. If the 
condition has been reached, the next instruction "falls through" to the next sequential instruction or branches 
outside the loop. 


Section 7.1: Foreach 


ForEach has two different meanings in PowerShell. One is a keyword and the other is an alias for the ForEach- 
Object cmdlet. The former is described here. 


This example demonstrates printing all items in an array to the console host: 
SNames = @('Amy', ‘Bob', ‘Celine’, '‘David') 
ForEach (SName in SNames) 


{ 


Write-Host "Hi, my name is SName!" 


} 


This example demonstrates capturing the output of a ForEach loop: 


SNumbers = ForEach (SNumber in 1..20) { 
SNumber # Alternatively, Write-Output SNumber 
} 


Like the last example, this example, instead, demonstrates creating an array prior to storing the loop: 


SNumbers = @() 
ForEach (SNumber in 1..20) 
{ 


SNumbers += SNumber 


} 


Section 7.2: For 


for(Si = @; $i -le 5; Si++){ 
" Susy 
} 


A typical use of the for loop is to operate on a subset of the values in an array. In most cases, if you want to iterate 
all values in an array, consider using a foreach statement. 


Section 7.3: ForEachQ Method 


Version > 4.0 


Instead of the ForEach-Object cmdlet, the here is also the possibility to use a ForEach method directly on object 
arrays like so 


(1..10).ForEach({S_ * S$_}) 
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or - if desired - the parentheses around the script block can be omitted 
(1..10).ForEach{S_ * $_} 


Both will result in the output below 


Section 7.4: ForEach-Object 


The ForEach-Object cmdlet works similarly to the foreach statement, but takes its input from the pipeline. 


Basic usage 


Sobject | ForEach-Object { 
code_block 


} 


Example: 


Snames = @("Any", "Bob", "Celine", "David" ) 
Snames | ForEach-Object { 
"Hi, my name is $_!" 


} 


Foreach-Object has two default aliases, foreach and % (shorthand syntax). Most common is % because foreach can 
be confused with the foreach statement. Examples: 


Snames o { 
"Hi, my name is $_!" 


} 


Snames | foreach { 
"Hi, my name is S_!" 


} 


Advanced usage 


Foreach-Object stands out from the alternative foreach solutions because it's a cndlet which means it's designed 
to use the pipeline. Because of this, it has support for three scriptblocks just like a cmdlet or advanced function: 


e Begin: Executed once before looping through the items that arrive from the pipeline. Usually used to create 
functions for use in the loop, creating variables, opening connections (database, web +) etc. 

e Process: Executed once per item arrived from the pipeline. "Normal" foreach codeblock. This is the default 
used in the examples above when the parameter isn't specified. 

e End: Executed once after processing all items. Usually used to close connections, generate a report etc. 
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Example: 


"Any", "Bob", "Celine", "David" | ForEach-Object -Begin { 
Sresults = @() 

} -Process { 
#Create and store message 
Sresults += "Hi, my name is $_!" 

} -End { 
#Count messages and output 
Write-Host "Total messages: $(Sresults.Count)" 
Sresults 


Section 7.5: Continue 


The Continue operator works in For, ForEach, While and Do loops. It skips the current iteration of the loop, jumping 
to the top of the innermost loop. 


$i =@ 
while (Si -1t 20) { 
S i+ 4 


if (Si -eq 7) { continue } 
Write-Host STI 


The above will output 1 to 20 to the console but miss out the number 7. 


Note: When using a pipeline loop you should use return instead of Continue. 


Section 7.6: Break 


The break operator will exit a program loop immediately. It can be used in For, ForEach, While and Do loops orina 
Switch Statement. 


Sie — ad 

while (Si -1t 15) { 
Sit+ 
if (Si -eq 7) {break} 
Write-Host $i 


The above will count to 15 but stop as soon as 7 is reached. 


Note: When using a pipeline loop, break will behave as continue. To simulate break in the pipeline loop you need 
to incorporate some additional logic, cmdlet, etc. It is easier to stick with non-pipeline loops if you need to use 
break. 


Break Labels 
Break can also call a label that was placed in front of the instantiation of a loop: 


$i = @ 
:mainLoop While (Si -1t 15) { 
Write-Host $i -ForegroundColor '‘Cyan' 
21 = 8 
While ($j -1t 15) { 
Write-Host $j -ForegroundColor 'Magenta' 
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Sk = $ix$j 
Write-Host Sk -ForegroundColor 'Green' 
if (Sk -gt 100) { 

break mainLoop 


} 
$j+ 
} 
Sit+ 


Note: This code will increment $i to 8 and $j to 13 which will cause $k to equal 104. Since $k exceed 180, the code 
will then break out of both loops. 


Section 7.7: While 


A while loop will evaluate a condition and if true will perform an action. As long as the condition evaluates to true 
the action will continue to be performed. 


while(condition) { 
code_block 
} 


The following example creates a loop that will count down from 10 to 0 


Si = 10 
while(Si -ge @){ 
Si 
Si 
} 


Unlike the Do-While loop the condition is evaluated prior to the action's first execution. The action will not be 
performed if the initial condition evaluates to false. 


Note: When evaluating the condition, PowerShell will treat the existence of a return object as true. This can be used 
in several ways but below is an example to monitor for a process. This example will spawn a notepad process and 
then sleep the current shell as long as that process is running. When you manually close the notepad instance the 
while condition will fail and the loop will break. 


Start-Process notepad.exe 
while(Get-Process notepad -ErrorAction SilentlyContinue) { 
Start-Sleep -Milliseconds 500 


} 


Section 7.8: Do 


Do-loops are useful when you always want to run a codeblock at least once. A Do-loop will evaluate the condition 
after executing the codeblock, unlike a while-loop which does it before executing the codeblock. 


You can use do-loops in two ways: 


e Loop while the condition is true: 


Do { 
code_block 
} while (condition) 
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e Loop until the condition is true, in other words, loop while the condition is false: 


Do { 
code_block 
} until (condition) 


Real Examples: 


Sa 20 

Do { 
Site 
"Number Si" 


} while (Si -ne 3) 


Do { 
Sit++ 
"Number Si" 
} until ($i -eq 3) 


Do-While and Do-Until are antonymous loops. If the code inside the same, the condition will be reversed. The 
example above illustrates this behaviour. 
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Chapter 8: Switch statement 


A switch statement allows a variable to be tested for equality against a list of values. Each value is called a case, and 
the variable being switched on is checked for each switch case. It enables you to write a script that can choose from 
a series of options, but without requiring you to write a long series of if statements. 


Section 8.1: Simple Switch 


Switch statements compare a single test value to multiple conditions, and performs any associated actions for 
successful comparisons. It can result in multiple matches/actions. 


Given the following switch... 


switch(SmyValue) 
{ 
"First Condition’ 1) EvrstvActwvony 3} 
"Second Condition' { ‘Second Action’ } 
} 


‘First Action’ will be output if SmyValue is set as 'First Condition’. 
‘Section Action’ will be output if SmyValue is set as 'Second Condition’. 


Nothing will be output if SnyValue does not match either conditions. 


Section 8.2: Switch Statement with CaseSensitive Parameter 


The -CaseSensitive parameter enforces switch statements to perform exact, case-sensitive matching against 
conditions. 


Example: 


switch -CaseSensitive ('Condition' ) 


{ 
‘condition’ {uRUES te AC tones} 
"Condition' {'Second Action'} 
"conditioN' {'Third Action'} 

} 

Output: 


Second Action 


The second action is the only action executed because it is the only condition that exactly matches the string 
‘Condition’ when accounting for case-sensitivity. 


Section 8.3: Switch Statement with Wildcard Parameter 


The -Wildcard parameter allows switch statements to perform wildcard matching against conditions. 


Example: 


switch -Wildcard ('Condition' ) 
{ 
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"Condition' {'Normal match' } 


"Condit*' {'Zero or more wildcard chars.'} 
'C[aoc]ndit[f-l]on' {'Range and set of chars.'} 
"C?ndition' {'Single char. wildcard'} 
‘Testx' {'No match'} 

} 

Output: 


Normal match 

Zero or more wildcard chars. 
Range and set of chars. 
Single char. wildcard 


Section 8.4: Switch Statement with File Parameter 


The -file parameter allows the switch statement to receive input from a file. Each line of the file is evaluated by 
the switch statement. 


Example file input.txt: 


condition 
test 


Example switch statement: 


switch -file input.txt 


{ 
rcondition! {First Action } 
‘test’ {'Second Action'} 
eal {'Third Action'} 

} 

Output: 


First Action 
Second Action 


Section 8.5: Simple Switch with Default Condition 
The Default keyword is used to execute an action when no other conditions match the input value. 


Example: 


switch('Condition' ) 
{ 
"Skip Condition' 
{ 


"First Action’ 


} 
‘Skip This Condition Too' 


{ 


"Second Action’ 


} 
Default 


{ 
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‘Default Action' 


Output: 


Default Action 


Section 8.6: Switch Statement with Regex Parameter 


The -Regex parameter allows switch statements to perform regular expression matching against conditions. 


Example: 


switch -Regex ('Condition' ) 


{ 
"Con\Dtion' 
'Conditioxs$' 
‘Gandattion: 
"AC\w+itions' 
‘Test’ 

} 

Output: 


{'One or more non-digits'} 

{'Zero or more "o"'} 

{'Any single char. '} 

{'Anchors and one or more word chars.'} 
{'No match’ } 


One or more non-digits 


Any single char. 


Anchors and one or more word chars. 


Section 8.7: Simple Switch With Break 


The break keyword can be used in switch statements to exit the statement before evaluating all conditions. 


Example: 


switch('Condition' ) 


{ 
"Condition' 


{ 


SELES (AGtEOM: 


} 
"Condition' 


{ 


"Second Action’ 


break 


} 
"Condition' 


{ 


‘Third Action’ 


} 
} 


Output: 


First Action 
Second Action 
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Because of the break keyword in the second action, the third condition is not evaluated. 


Section 8.8: Switch Statement with Exact Parameter 


The -Exact parameter enforces switch statements to perform exact, case-insensitive matching against string- 
conditions. 


Example: 


switch -Exact ('Condition' ) 


{ 
‘condition’ {cFiGSteActvlonuy 
"Condition' {'Second Action'} 
"conditioN' {'Third Action’ } 
"Axondition$' {'Fourth Action' } 
"Conditiox' {rateh Ac talons} 

} 

Output: 


First Action 
Second Action 
Third Action 


The first through third actions are executed because their associated conditions matched the input. The regex and 


wildcard strings in the fourth and fifth conditions fail matching. 


Note that the fourth condition would also match the input string if regular expression matching was being 
performed, but was ignored in this case because it is not. 


Section 8.9: Switch Statement with Expressions 
Conditions can also be expressions: 
SmyInput = @ 


switch(SmyInput) { 
# because the result of the expression, 4, 
# does not equal our input this block should not be run. 
(2+2) { ‘True. 2 +2 = 4' } 


# because the result of the expression, 9, 
# does equal our input this block should be run. 
(2-2) { 'True. 2-2 = @' } 


# because our input is greater than -1 and is less than 1 
# the expression evaluates to true and the block should be run. 
{ $_ -gt -1 -and $_ -1t 1 } { ‘True. Value is @' } 

} 


#Output 
True. 2-2 = @ 
True. Value is @ 
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Chapter 9: Strings 


Section 9.1: Multiline string 
There are multiple ways to create a multiline string in PowerShell: 


e You can use the special characters for carriage return and/or newline manually or use the NewLine- 
environment variable to insert the systems "newline" value) 


"Hello’ r*nWorld" 
"Hello{@}World" -f [environment]: :NewLine 


e Create a linebreak while defining a string (before closing quote) 


"Hello 
World" 


e Using a here-string. This is the most common technique. 


@" 
Hello 
World 
"@ 


Section 9.2: Here-string 


Here-strings are very useful when creating multiline strings. One of the biggest benefits compared to other 
multiline strings are that you can use quotes without having to escape them using a backtick. 


Here-string 


Here-strings begin with @" and a linebreak and end with "@ on its own line ("@must be first characters on the line, 
not even whitespace/tab). 


@" 
Simple 

Multiline string 
with "quotes" 
"@ 


Literal here-string 


You could also create a literal here-string by using single quotes, when you don't want any expressions to be 
expanded just like a normal literal string. 


@' 
The following line won't be expanded 
$(Get-Date) 


because this is a literal here-string 
'@ 


Section 9.3: Concatenating strings 


Using variables in a string 
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You can concatenate strings using variables inside a double-quoted string. This does not work with properties. 


Sstring1 = "Power" 
Sstring2 = "Shell" 
"Greetings from Sstring1$string2" 


Using the + operator 


You can also join strings using the + operator. 


Sstring1 = "Greetings from" 
Sstring2 = "PowerShell" 
Sstringl + % + Sstring2 


This also works with properties of objects. 


"The title of this console is + Shost.Name + "'" 


Using subexpressions 


The output/result of a subexpressions $() can be used in a string. This is useful when accessing properties of an 
object or performing a complex expression. Subexpressions can contain multiple statements separated by 
semicolon ; 


“Tomorrow is $((Get-Date) .AddDays(1) .DayOfWeek) " 


Section 9.4: Special characters 
When used inside a double-quoted string, the escape character (backtick *) represents a special character. 


#Null 

#Alert/Beep 

#Backspace 

#Form feed (used for printer output) 
#New line 

#Carriage return 

#Horizontal tab 

#Vertical tab (used for printer output) 


<atuas3ashoo ® 


Example: 


> "This tuses ttab’r°nThis is on a second line" 
This uses tab 
This is on a second line 


You can also escape special characters with special meanings: 


“# #Comment-operator 
"Sy #Variable operator 
#Escape character 
#Single quote 
#Double quote 


Section 9.5: Creating a basic string 


String 
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Strings are created by wrapping the text with double quotes. Double-quoted strings can evaluate variables and 
special characters. 


SmyString = "Some basic text" 
SmySecondString = "String with a $variable" 


To use a double quote inside a string it needs to be escaped using the escape character, backtick (*). Single quotes 


can be used inside a double-quoted string. 


SmyString = "A ~“"“double quoted’ " string which also has ‘single quotes'." 


Literal string 


Literal strings are strings that doesn't evaluate variables and special characters. It's created using single quotes. 
SmyLiteralString = ‘Simple text including special characters (*n) and a Svariable-reference' 


To use single quotes inside a literal string, use double single quotes or a literal here-string. Double quotes can be 
used Safely inside a literal string 


SmyLiteralString = ‘Simple string with ''single quotes'' and “double quotes". ' 


Section 9.6: Format string 
Shash = @{ city = 'Berlin' } 


$result = 'You should really visit {@}' -f Shash.city 
Write-Host Sresult #prints "You should really visit Berlin" 


Format strings can be used with the -f operator or the static [String]::Format(string format, args) .NET 
method. 
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Chapter 10: HashTables 


A Hash Table is a structure which maps keys to values. See Hash Table for details. 


Section 10.1: Access a hash table value by key 
An example of defining a hash table and accessing a value by the key 


ShashTable = @{ 
Key1 = 'Value1' 
Key2 = 'Value2' 

} 

ShashTable.Key1 

#output 

Valuel 


An example of accessing a key with invalid characters for a property name: 
ShashTable = @{ 
"Key 1' = 'Value3' 


Key2 = 'Value4' 


} 
ShashTable. ‘Key 1' 


#Output 
Value3 


Section 10.2: Creating a Hash Table 
Example of creating an empty HashTable: 

ShashTable = @{} 

Example of creating a HashTable with data: 


ShashTable = @{ 
Name1 = 'Value' 
Name2 = 'Value' 
Name3 = 'Value3' 


Section 10.3: Add a key value pair to an existing hash table 


An example, to add a "Key2" key with a value of "Value2" to the hash table, using the addition operator: 


ShashTable = @{ 
Key1 = 'Value1' 


azo += @{Key2 = 'Value2'} 
ShashTable 

#Output 

Name Value 
Key! Valuet 
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Key2 Value2 
An example, to add a "Key2" key with a value of "Value2" to the hash table using the Add method: 


ShashTable = @{ 
Key1 = 'Value1' 


} 

ShashTable.Add("Key2", "Value2") 
ShashTable 

#Output 

Name Value 
Key1 Value 
Key2 Value2 


ae 10.4: Remove a key value pair from an existing hash 
table 


An example, to remove a "Key2" key with a value of "Value2" from the hash table, using the remove operator: 


ShashTable = @{ 


Key1 = 'Valuet1' 

Key2 = 'Value2' 
} 
ShashTable.Remove("Key2", "Value2") 
ShashTable 
#Output 
Name Value 
Key1 Value 


Section 10.5: Enumerating through keys and Key-Value Pairs 


Enumerating through Keys 


foreach (Skey in Svar1.Keys) { 
Svalue = $var1[Skey] 
# or 
Svalue = $var1.Skey 


Enumerating through Key-Value Pairs 


foreach (Skeyvaluepair in Svar1.GetEnumerator()) { 
Skey1 = S_.Key1 
Sval1 = $_.Val1 


Section 10.6: Looping over a hash table 


ShashTable = @{ 
Key1 "Valuet' 
Key2 "Value2' 
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} 


foreach(Skey in ShashTable.Keys) 
{ 
Svalue = ShashTable.Skey 
Write-Output "Skey : $value’ 


} 
#Output 


Key1 : Value1 
Key2 : Value2 
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Chapter 11: Working with Objects 


Section 11.1: Examining an object 


Now that you have an object, it might be good to figure out what it is. You can use the Get-Member cmdlet to see 
what an object is and what it contains: 


Get-Item c:\windows | Get-Member 


This yields: 


TypeName: System.1I0.DirectoryInfo 


Followed by a list of properties and methods the object has. 


Another way to get the type of an object is to use the GetType method, like so: 


C:\> SObject = Get-Item C:\Windows 
C:\> SObject.GetType() 


IsPublic IsSerial Name 


True True 


DirectoryInfo 


BaseType 


System.I0.FileSystemInfo 


To view a list of properties the object has, along with their values, you can use the Format-List cmdlet with its 
Property parameter set to: * (meaning all). 


Here is an example, with the resulting output: 


C:\> Get-Item C:\Windows | 


PSPath 
PSParentPath 
PSChildName 
PSDrive 
PSProvider 
PSIsContainer 
Mode 
BaseName 
Target 
LinkType 
Name 

Parent 
Exists 

Root 

Ful lName 
Extension 
CreationTime 


CreationTimeUtc 


LastAccessTime 


LastWriteTime 


LastWriteTimeUtc 


Attributes 


Format-List -Property * 


: Microsoft.PowerShell.Core\FileSystem: :C:\Windows 
: Microsoft.PowerShell.Core\FileSystem: :C:\ 

: Windows 

2G 

: Microsoft.PowerShell.Core\FileSystem 

: True 


: Windows 


: {} 
: Windows 


: True 
ae CEN 
: C:\Windows 


: 30/10/2015 06:28:30 
: 30/10/2015 06:28:30 
: 16/08/2016 17:32:04 
LastAccessTimeUtc : 
: 16/08/2016 17:32:04 
: 16/08/2016 16:32:04 
: Directory 


16/08/2016 16:32:04 
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Section 11.2: Updating Objects 
Adding properties 


If you'd like to add properties to an existing object, you can use the Add-Member cmdlet. With PSObjects, values are 
kept in a type of "Note Properties" 


Sobject = New-Object -TypeName PSObject -Property @{ 
Name = Senv:username 
ID = 12 
Address = Snull 
} 


Add-Member -InputObject Sobject -Name "SomeNewProp" -Value "A value" -MemberType NoteProperty 
# Returns 

PS> SObject 

Name ID Address SomeNewProp 

nem 12 A value 


You can also add properties with Select-Object Cmdlet (so called calculated properties): 


SnewObject = SObject | Select-Object *, @{label='SomeOtherProp'; expression={'Another value’ }} 
# Returns 

PS> SnewObject 

Name ID Address SomeNewProp SomeOtherProp 

nem 12 A value Another value 


The command above can be shortened to this: 


SnewObject = SObject | Select *,@{1='SomeOtherProp' ;e={'Another value’ }} 


Removing properties 
You can use the Select-Object Cmdlet to remove properties from an object: 


Sobject = SnewObject | Select-Object * -ExcludeProperty ID, Address 


# Returns 

PS> Sobject 

Name SomeNewProp SomeOtherProp 
nem A value Another value 


Section 11.3: Creating a new object 


PowerShell, unlike some other scripting languages, sends objects through the pipeline. What this means is that 
when you send data from one command to another, it's essential to be able to create, modify, and collect objects. 


Creating an object is simple. Most objects you create will be custom objects in PowerShell, and the type to use for 
that is PSObject. PowerShell will also allow you to create any object you could create in .NET. 


Here's an example of creating a new objects with a few properties: 
Option 1: New-Object 


Goalkicker.com - PowerShell® Notes for Professionals 55 


SnewObject = New-Object -TypeName PSObject -Property @{ 
Name = Senv:username 
ID = 12 
Address = Snull 

} 


# Returns 
PS> SnewObject 
Name ID Address 


nem 12 


You can store the object in a variable by prefacing the command with SnewObject 


You may also need to store collections of objects. This can be done by creating an empty collection variable, and 
adding objects to the collection, like so: 


SnewCollection = @() 

SnewCollection += New-Object -TypeName PSObject -Property @{ 
Name = Senv:username 
ID = 12 
Address = Snull 


You may then wish to iterate through this collection object by object. To do that, locate the Loop section in the 
documentation. 


Option 2: Select-Object 
A less common way of creating objects that you'll still find on the internet is the following: 


SnewObject = '‘unuseddummy ' Select-Object -Property Name, ID, Address 
SnewObject.Name = Senv:username 
SnewObject.ID = 12 


# Returns 
PS> SnewObject 
Name ID Address 


nem 12 


Option 3: pscustomobject type accelerator (PSv3+ required) 


The ordered type accelerator forces PowerShell to keep our properties in the order that we defined them. You don't 
need the ordered type accelerator to use [PSCustomObject]: 


SnewObject = [PSCustomObject] [Ordered]@{ 
Name = Senv:Username 
ID 12 
Address = Snull 


} 


# Returns 
PS> SnewObject 
Name ID Address 


nem 12 
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Section 11.4: Creating Instances of Generic Classes 


Note: examples written for PowerShell 5.1 You can create instances of Generic Classes 


#Nullable System.DateTime 
[Nullable[datetime]]SnullableDate = Get-Date -Year 2012 
SnullableDate 

SnullableDate.GetType() .FullName 

SnullableDate = Snull 

SnullableDate 


#Normal System.DateTime 

[datetime]SaDate = Get-Date -Year 2013 

SaDate 

SaDate.GetType().FullName 

SaDate = Snull #Throws exception when PowerShell attempts to convert null to 


Gives the output: 


Saturday, 4 August 2012 08:53:02 
System.DateTime 

Sunday, 4 August 2013 08:53:02 
System.DateTime 

Cannot convert null to type "System.DateTime". 
At line:14 char:1 

+ $aDate = $null 


+ CategoryInfo : MetadataError: (:) [], ArgumentTransformationMetadataException 


+ FullyQualifiedErrorId : RuntimeException 


Generic Collections are also possible 


[System.Collections.Generic.SortedDictionary[int, String]]Sdict = 
[System.Collections.Generic.SortedDictionary[int, String] ]::new() 
Sdict .GetType() .FullName 


$dict.Add(1, ‘a’ 


a') 
$dict.Add(2, 'b') 
$dict.Add(3, 'c') 


Sdict.Add('4', 'd') #powershell auto converts '4' to 4 
Sdict.Add('5.1', ‘c') #powershell auto converts '5.1' to 5 
Sdict 


Sdict.Add('z', 'z') #powershell can't convert 'z' to System.Int32 so it throws an error 


Gives the output: 


System.Collections.Generic.SortedDictionary 2[[System.Int32, mscorlib, Version=4.0.0.0, 
Culture=neutral, PublickeyToken=b77a5c561934e089], [System.String, mscorlib, Version=4.0.0.0, 
Culture=neutral, PublickKeyToken=b77a5c561934e089] ] 


Key Value 
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3 °¢ 

4d 

5 Cc 

Cannot convert argument "key", with value: "z", for "Add" to type "System.Int32": "Cannot convert 
value "z" to type "System.Int32". Error: "Input string was not in a correct format."" 

At line:15 char:1 

+ $dict.Add('z', 'z') #powershell can't convert 'z' to System.Int32 so 


+ CategoryInfo : NotSpecified: (:) [], MethodException 
+ FullyQualifiedErrorId : MethodArgumentConversionInvalidCastArgument 
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Chapter 12: PowerShell Functions 


A function is basically a named block of code. When you call the function name, the script block within that function 
runs. It is a list of PowerShell statements that has a name that you assign. When you run a function, you type the 
function name. It is a method of saving time when tackling repetitive tasks. PowerShell formats in three parts: the 
keyword ‘Function’, followed by a Name, finally, the payload containing the script block, which is enclosed by 
curly/parenthesis style bracket. 


Section 12.1: Basic Parameters 


A function can be defined with parameters using the param block: 


function Write-Greeting { 
param( 
[Parameter(Mandatory, Position=@) ] 
[String]Sname, 
[Parameter(Mandatory, Position=1) ] 
[Int] Sage 
) 


“Hello Sname, you are Sage years old." 


Or using the simple function syntax: 


function Write-Greeting (Sname, Sage) { 
"Hello Sname, you are Sage years old." 


} 


Note: Casting parameters is not required in either type of parameter definition. 


Simple function syntax (SFS) has very limited capabilities in comparison to the param block. 
Though you can define parameters to be exposed within the function, you cannot specify Parameter Attributes, 
utilize Parameter Validation, include [CmdletBinding()], with SFS (and this is a non-exhaustive list). 


Functions can be invoked with ordered or named parameters. 


The order of the parameters on the invocation is matched to the order of the declaration in the function header (by 
default), or can be specified using the Position Parameter Attribute (as shown in the advanced function example, 
above). 


Sgreeting = Write-Greeting "Jim" 82 
Alternatively, this function can be invoked with named parameters 


Sgreeting = Write-Greeting -name "Bob" -age 82 


Section 12.2: Advanced Function 


This is a copy of the advanced function snippet from the Powershell ISE. Basically this is a template for many of the 
things you can use with advanced functions in Powershell. Key points to note: 


e get-help integration - the beginning of the function contains a comment block that is set up to be read by the 
get-help cmdlet. The function block may be located at the end, if desired. 
e cmdletbinding - function will behave like a cmdlet 
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e parameters 
e parameter sets 


<# 
. Synopsis 
Short description 
. DESCRIPTION 
Long description 
. EXAMPLE 
Example of how to use this cmdlet 
. EXAMPLE 
Another example of how to use this cmdlet 
. INPUTS 
Inputs to this cmdlet (if any) 
. OUTPUTS 
Output from this cmdlet (if any) 
.NOTES 
General notes 
. COMPONENT 
The component this cmdlet belongs to 
.ROLE 
The role this cmdlet belongs to 
. FUNCTIONALITY 
The functionality that best describes this cmdlet 
#> 
function Verb-Noun 
{ 

[CmdletBinding(DefaultParameterSetName='Parameter Set 1', 
SupportsShouldProcess=Strue, 
PositionalBinding=Sfalse, 

HelpUri = 'http://www.microsoft.com/' , 
ConfirmImpact=' Medium’ ) ] 

[Alias()] 

[OutputType([String])] 

Param 

( 

# Param1 help description 

[Parameter (Mandatory=Strue, 
ValueFromPipeline=Strue, 
ValueFromPipelineByPropertyName=Strue, 
ValueFromRemainingArguments=Sfalse, 
Position=0, 
ParameterSetName='Parameter Set 1')] 

[ ValidateNotNul11()] 

[ValidateNotNullOrEmpty() ] 

[ ValidateCount(9, 5) ] 

[ValidateSet("sun", "moon", "earth")] 

[Alias("p1")] 

SParam1, 


# Param2 help description 
[Parameter(ParameterSetName='Parameter Set 1')] 
[ AllowNul1()] 

[AllowEmptyCollection() ] 

[ AllowEmptyString() ] 

[ValidateScript({Strue})] 

[ValidateRange(0@, 5) ] 

[int] 

SParam2, 


# Param3 help description 
[Parameter(ParameterSetName='Another Parameter Set')] 
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[ValidatePattern("[a-z]*")] 
[ValidateLength(@, 15) ] 


[String] 
SParam3 
) 
Begin 
‘ 
} 
Process 
{ 
if (Spscmdlet.ShouldProcess("Target", "Operation" )) 
{ 
} 
} 
End 
{ 
1 


Section 12.3: Mandatory Parameters 


Parameters to a function can be marked as mandatory 


function Get-Greeting{ 
param 


( 


) 
"Hello World Sname" 


[Parameter (Mandatory=Strue) ]Sname 


If the function is invoked without a value, the command line will prompt for the value: 


Sgreeting = Get-Greeting 
cmdlet Get-Greeting at command pipeline position 1 


Supply values for the following parameters: 
name: 


Section 12.4: Parameter Validation 


There are a variety of ways to validate parameter entry, in PowerShell. 


Instead of writing code within functions or scripts to validate parameter values, these ParameterAttributes will 
throw if invalid values are passed. 


ValidateSet 


Sometimes we need to restrict the possible values that a parameter can accept. Say we want to allow only red, 
green and blue for the SColor parameter in a script or function. 


We can use the ValidateSet parameter attribute to restrict this. It has the additional benefit of allowing tab 
completion when setting this argument (in some environments). 


param( 
[ValidateSet('red', ‘green’, 'blue' , IgnoreCase) ] 
[string]$Color 


Goalkicker.com - PowerShell® Notes for Professionals 


41 


You can also specify IgnoreCase to disable case sensitivity. 
ValidateRange 


This method of parameter validation takes a min and max Int32 value, and requires the parameter to be within that 
range. 


param( 
[ ValidateRange(@, 128) ] 
[Int] SAge 

) 


ValidatePattern 
This method of parameter validation accepts parameters that match the regex pattern specified. 


param( 
[ValidatePattern("\w{4-6}\d{2}")] 
[ string]SUserName 


ValidateLength 


This method of parameter validation tests the length of the passed string. 


param( 
[ValidateLength(@, 15) ] 
[ String ]$PhoneNumber 

) 


ValidateCount 
This method of parameter validation tests the amount of arguments passed in, for example, an array of strings. 


param( 
[ValidateCount(1,5)] 
[String[]]SComputerName 


ValidateScript 


Finally, the ValidateScript method is extraordinarily flexible, taking a scriptblock and evaluating it using $_ to 
represent the passed argument. It then passes the argument if the result is $true (including any output as valid). 


This can be used to test that a file exists: 


param( 
[ValidateScript({Test-Path $_})] 
[I0.FileInfo]$Path 


To check that a user exists in AD: 
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param( 
[ValidateScript({Get-ADUser $_})] 
[String ]SUserName 


And pretty much anything else you can write (as it's not restricted to oneliners): 


param( 
[ValidateScript({ 
SAnHourAgo = (Get-Date) .AddHours(-1) 
if (S_ -1t SAnHourAgo.AddMinutes(5) -and $_ -gt SAnHourAgo.AddMinutes(-5)) { 
Strue 
} else { 
throw "That's not within five minutes. Try again." 
} 
})] 


[ String ]$TimeAboutAnHourAgo 


Section 12.5: Simple Function with No Parameters 


This is an example of a function which returns a string. In the example, the function is called in a statement 
assigning a value to a variable. The value in this case is the return value of the function. 


function Get-Greeting{ 
"Hello World" 


} 


# Invoking the function 
Sgreeting = Get-Greeting 


# demonstrate output 


Sgreeting 
Get-Greeting 


function declares the following code to be a function. 


Get-Greeting is the name of the function. Any time that function needs to be used in the script, the function can be 
called by means of invoking it by name. 


{ ... }is the script block that is executed by the function. 
If the above code is executed in the ISE, the results would be something like: 


Hello World 
Hello World 
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Chapter 13: PowerShell Classes 


A class is an extensible program-code-template for creating objects, providing initial values for state (member 
variables) and implementations of behavior (member functions or methods).A class is a blueprint for an object. It is 
used as a model to define the structure of objects. An object contains data that we access through properties and 
that we can work on using methods. PowerShell 5.0 added the ability to create your own classes. 


Section 13.1: Listing available constructors for a class 


Version = 5.0 


In PowerShell 5.0+ you can list available constructors by calling the static new-method without parentheses. 


PS> [DateTime] : :new 
OverloadDefinitions 


datetime new(long ticks) 

datetime new(long ticks, System.DateTimeKind kind) 

datetime new(int year, int month, int day) 

datetime new(int year, int month, int day, System.Globalization.Calendar calendar) 

datetime new(int year, int month, int day, int hour, int minute, int second) 

datetime new(int year, int month, int day, int hour, int minute, int second, System.DateTimeKind 
kind) 

datetime new(int year, int month, int day, int hour, int minute, int second, 
System.Globalization.Calendar calendar) 

datetime new(int year, int month, int day, int hour, int minute, int second, int millisecond) 
datetime new(int year, int month, int day, int hour, int minute, int second, int millisecond, 
System.DateTimeKind kind) 

datetime new(int year, int month, int day, int hour, int minute, int second, int millisecond, 
System.Globalization.Calendar calendar) 

datetime new(int year, int month, int day, int hour, int minute, int second, int millisecond, 
System.Globalization.Calendar calendar, System.DateTimeKind kind) 


This is the same technique that you can use to list overload definitions for any method 


‘abc' .CompareTo 


OverloadDefinitions 


int CompareTo(System.Object value) 

int CompareTo(string strB) 

int IComparable.CompareTo(System.Object obj) 
int IComparable[string] .CompareTo(string other) 


For earlier versions you can create your own function to list available constructors: 


function Get-Constructor { 
[CmdletBinding()] 
param( 
[Parameter(ValueFromPipeline=Strue) ] 
[type]Stype 
) 


Process { 
Stype.GetConstructors() | 
Format-Table -Wrap @{ 
n="S$(Stype.Name) Constructors" 
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e={ (S_.GetParameters() | % { $_.ToString() }) -Join ", " } 


Usage: 


Get-Constructor System.DateTime 
#0r [datetime] | Get-Constructor 


DateTime Constructors 

Int64 ticks 

Int64 ticks, System.DateTimeKind kind 

Int32 year, Int32 month, Int32 day 

Int32 year, Int32 month, Int32 day, System.Globalization.Calendar calendar 

Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second 

Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, System.DateTimeKind 
kind 

Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, 
System.Globalization.Calendar calendar 

Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, Int32 millisecond 
Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, Int32 millisecond, 
System.DateTimeKind kind 

Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, Int32 millisecond, 
System.Globalization.Cal 

endar calendar 

Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, Int32 millisecond, 
System.Globalization.Cal 

endar calendar, System.DateTimeKind kind 


Section 13.2: Methods and properties 


class Person { 
[string] SFirstName 
[string] SLastName 
[string] Greeting() { 
return "Greetings, {0} {1}!" -f Sthis.FirstName, Sthis.LastName 
} 
} 


Sx = [Person] : :new() 
$x.FirstName = "Jane" 
Sx.LastName = "Doe 
Sgreeting = $x.Greeting() # "Greetings, Jane Doe!" 


Section 13.3: Constructor overloading 


class Person { 
[string] SName 
[int] SAge 


Person([string] SName) { 
Sthis.Name = SName 
} 


Person([string] SName, [int]SAge) { 
Sthis.Name = SName 
Sthis.Age = SAge 
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Section 13.4: Get All Members of an Instance 


PS > Get-Member -InputObject SanObjectInstance 


This will return all members of the type instance. Here is a part of a sample output for String instance 


TypeName: System.String 


Name MemberType Definition 

Clone Method System.Object Clone(), System.Object ICloneable.Clone() 
CompareTo Method int CompareTo(System.Object value), int CompareTo(string 
strB), i... 

Contains Method bool Contains(string value) 

CopyTo Method void CopyTo(int sourceIndex, char[] destination, int 
destinationl... 

EndsWith Method bool EndsWith(string value), bool EndsWith(string value, 
System.S... 

Equals Method bool Equals(System.Object obj), bool Equals(string value), 
bool E... 

GetEnumerator Method System.CharEnumerator GetEnumerator(), 
System.Collections.Generic... 

GetHashCode Method int GetHashCode( ) 

GetType Method type GetType() 


Section 13.5: Basic Class Template 


# Define a class 

class TypeName 

{ 
# Property with validate set 
[ValidateSet("val1", "Val2")] 
[string] $P1 


# Static property 
static [hashtable] S$P2 


# Hidden property does not show as result of Get-Member 
hidden [int] $P3 


# Constructor 
TypeName ([string] Ss) 


Sthise Pilleaess 
} 


# Static method 
static [void] MemberMethod1([hashtable] Sh) 
{ 
[TypeName]::P2 = Sh 
} 


# Instance method 
[int] MemberMethod2([int] Si) 
{ 
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Sthis.P3 = Si 
return Sthis.P3 


Section 13.6: Inheritance from Parent Class to Child Class 


class ParentClass 


{ 
[string] SMessage = “It's under the Parent Class" 
[string] GetMessage() 
{ 
return ("Message: {@}" -f Sthis.Message) 
} 
} 


# Bar extends Foo and inherits its members 
class ChildClass : ParentClass 
{ 


i 
SInherit = [ChildClass]: :new() 


SO, $Inherit.Message will give you the 


"It's under the Parent Class" 
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Chapter 14: PowerShell Modules 


Starting with PowerShell version 2.0, developers can create PowerShell modules. PowerShell modules encapsulate 
a set of common functionality. For example, there are vendor-specific PowerShell modules that manage various 
cloud services. There are also generic PowerShell modules that interact with social media services, and perform 
common programming tasks, such as Base64 encoding, working with Named Pipes, and more. 


Modules can expose command aliases, functions, variables, classes, and more. 


Section 14.1: Create a Module Manifest 


aq 
RootModule = 'MyCoolModule.psm1' 
ModuleVersion = '1.0' 
CompatiblePSEditions = @('Core') 
GUID = '6b42c995-67da-4139-be79-597a328056cc' 
Author = ‘Bob Schmob' 
CompanyName = 'My Company’ 
Copyright = '(c) 2017 Administrator. All rights reserved. ' 
Description = 'It does cool stuff.’ 
FunctionsToExport = @() 
CmdletsToExport = @() 
VariablesToExport = @() 
AliasesToExport = @() 
DscResourcesToExport = @() 


Every good PowerShell module has a module manifest. The module manifest simply contains metadata about a 
PowerShell module, and doesn't define the actual contents of the module. 


The manifest file is a PowerShell script file, with a .psd1 file extension, that contains a HashTable. The HashTable in 
the manifest must contain specific keys, in order for PowerShell to correctly interpret it as a PowerShell module file. 


The example above provides a list of the core HashTable keys that make up a module manifest, but there are many 
others. The New-ModuleManifest command helps you create a new module manifest skeleton. 


Section 14.2: Simple Module Example 


function Add { 
[CmdletBinding()] 
param ( 
[int] $x 
, [int] Sy 
) 


return Sx + Sy 


} 


Export-ModuleMember -Function Add 


This is a simple example of what a PowerShell script module file might look like. This file would be called 
MyCoolModule.psm1, and is referenced from the module manifest (.psd1) file. You'll notice that the Export- 
ModuleMember command enables us to specify which functions in the module we want to "export," or expose, to the 
user of the module. Some functions will be internal-only, and shouldn't be exposed, so those would be omitted 
from the call to Export-ModuleMember. 
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Section 14.3: Exporting a Variable from a Module 


S$FirstName = '‘Bob' 
Export-ModuleMember -Variable FirstName 


To export a variable from a module, you use the Export-ModuleMember command, with the -Variable parameter. 
Remember, however, that if the variable is also not explicitly exported in the module manifest (.psd1) file, then the 
variable will not be visible to the module consumer. Think of the module manifest like a "gatekeeper." If a function 
or variable isn't allowed in the module manifest, it won't be visible to the module consumer. 


Note: Exporting a variable is similar to making a field in a class public. It is not advisable. It would be better to 
expose a function to get the field and a function to set the field. 


Section 14.4: Structuring PowerShell Modules 


Rather than defining all of your functions in a single .psm1 PowerShell script module file, you might want to break 
apart your function into individual files. You can then dot-source these files from your script module file, which in 
essence, treats them as if they were part of the .psm1 file itself. 


Consider this module directory structure: 


\MyCoolModule 

\Functions 
Function! .ps1 
Function2.ps1 
Function3.ps1 
MyCoolModule.psd1 
MyCoolModule.psm1 


Inside your MyCoolModule.psm1 file, you could insert the following code: 


Get-ChildItem -Path $PSScriptRoot\Functions | 
ForEach-Object -Process { . SPSItem.FullName } 


This would dot-source the individual function files into the .psm1 module file. 


Section 14.5: Location of Modules 
PowerShell looks for modules in the directories listed in the $Env:PSModulepath. 
A module called foo, in a folder called foo will be found with Import-Module foo 


In that folder, PowerShell will look for a module manifest (foo.psd1), a module file (foo.psm1), a DLL (foo.dll). 


Section 14.6: Module Member Visibility 


By default, only functions defined in a module are visible outside of the module. In other words, if you define 
variables and aliases in a module, they won't be available except in the module's code. 


To override this behavior, you can use the Export-ModuleMember cmdlet. It has parameters called -Function, - 
Variable, and -Alias which allow you to specify exactly which members are exported. 


It is important to note that if you use Export-ModuleMember, only the items you specify will be visible. 
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Chapter 15: PowerShell profiles 


Section 15.1: Create an basic profile 

A PowerShell profile is used to load user defined variables and functions automatically. 
PowerShell profiles are not automatically created for users. 

To create a PowerShell profile C:>New-Item -ItemType File Sprofile. 

If you are in ISE you can use the built in editor C:>psEdit Sprofile 


An easy way to get started with your personal profile for the current host is to save some text to path stored in the 
Sprofile-variable 


"#Current host, current user" > Sprofile 


Further modification to the profile can be done using PowerShell ISE, notepad, Visual Studio Code or any other 
editor. 


The Sprofile-variable returns the current user profile for the current host by default, but you can access the path 
to the machine-policy (all users) and/or the profile for all hosts (console, ISE, 3rd party) by using its properties. 


PS> SPROFILE | Format-List -Force 


AllUsersAllHosts : C:\Windows\System32\WindowsPowerShell\v1.@\profile.ps1 
AllUsersCurrentHost 

C :\Windows\System32\WindowsPowerShell\v1.@\Microsoft.PowerShell_profile.ps1 
CurrentUserAllHosts : C:\Users\user\Documents\WindowsPowerShell\profile.ps1 


CurrentUserCurrentHost : C:\Users\user\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 
Length 2 79 


PS> SPROFILE.A11UsersAllHosts 
C :\Windows\System32\WindowsPowerShell\v1.0\profile.ps1 
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Chapter 16: Calculated Properties 


Calculated Properties in PowerShell are custom derived (Calculated) properties. It lets the user to format a certain 
property in a way he want it to be. The calculation(expression) can be a quite possibly anything. 


Section 16.1: Display file size in KB - Calculated Properties 
Let's consider the below snippet, 


Get-ChildItem -Path C:\MyFolder | Select-Object Name, CreationTime, Length 


It simply output the folder content with the selected properties. Something like, 


CreationTime Length 


AnotherFile.txt 1/ 17 2:45:02 PM 546000 
filetomove.txt 1/5/2017 2:36:01 PM 5 


What if | want to display the file size in KB ? This is where calcualted properties comes handy. 


Get-ChildItem C:\MyFolder | Select-Object Name, @{Name="Size_In_KB" ;Expression={S_.Length / 1Kb}} 


Which produces, 


Name Size_In_KB 


AnotherFi le. txt 5 33. 203125 
Secondfile.txt 1066.4111328125 


The Expression is what holds the calculation for calculated property. And yes, it can be anything! 
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Chapter 17: Using existing static classes 


These classes are reference libraries of methods and properties that do not change state, in one word, immutable. 
You don't need to create them, you simply use them. Classes and methods such as these are called static classes 
because they are not created, destroyed, or changed. You can refer to a static class by surrounding the class name 
with square brackets. 


Section 17.1: Adding types 
By Assembly Name, add library 

Add-Type -AssemblyName "System.Math" 

or by file path: 

Add-Type -Path "D:\Libs\CustomMath.d11" 
To Use added type: 


[CustomMath .NameSpace]::Method(param1, SvariableParam, [int]castMeAsIntParam) 


Section 17.2: Using the .Net Math Class 


You can use the .Net Math class to do calculations ([System.Math]) 


If you want to know which methods are available you can use: 


[System.Math] | Get-Member -Static -MemberType Methods 


Here are some examples how to use the Math class: 


PS C:\> [System.Math] ::Floor(9.42) 
PS C:\> [System.Math] ::Ceiling(9.42) 
PS C:\> [System.Math] : :Pow(4, 3) 


PS C:\> [System.Math] ::Sqrt(49) 


Section 17.3: Creating new GUID instantly 
Use existing .NET classes instantly with PowerShell by using [class]::Method(args): 


PS C:\> [guid]: :NewGuid() 


Guid 
8874a185-64be-43ed-a64c-d2fe4b6e31bc 


Similarly, in PowerShell 5+ you may use the New-Guid cmdlet: 


PS C:\> New-Guid 
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Guid 
8874a185-64be-43ed-a64c-d2fe4b6e31be 
To get the GUID as a [String] only, referenced the .Guid property: 


[ guid] : :NewGuid() .Guid 
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Chapter 18: Built-in variables 


PowerShell offers a variety of useful "automatic" (built-in) variables. Certain automatic variables are only populated 
in special circumstances, while others are available globally. 


Section 18.1: $PSScriptRoot 


Get-ChildItem -Path $PSScriptRoot 


This example retrieves the list of child items (directories and files) from the folder where the script file resides. 


The $PSScriptRoot automatic variable is Snull if used from outside a PowerShell code file. If used inside a 
PowerShell script, it automatically defined the fully-qualified filesystem path to the directory that contains the script 
file. 


In Windows PowerShell 2.0, this variable is valid only in script modules (.psm1). Beginning in Windows PowerShell 
3.0, it is valid in all scripts. 


Section 18.2: $Args 
SArgs 


Contains an array of the undeclared parameters and/or parameter values that are passed to a function, script, or 
script block. When you create a function, you can declare the parameters by using the param keyword or by adding 
a comma-separated list of parameters in parentheses after the function name. 


In an event action, the $Args variable contains objects that represent the event arguments of the event that is being 
processed. This variable is populated only within the Action block of an event registration command. The value of 
this variable can also be found in the SourceArgs property of the PSEventArgs object 
(System.Management.Automation.PSEventArgs) that Get-Event returns. 


Section 18.3: $PSltem 


Get-Process | ForEach-Object -Process { 
SPSItem.Name 
} 


Same as $_. Contains the current object in the pipeline object. You can use this variable in commands that perform 
an action on every object or on selected objects in a pipeline. 


Section 18.4: $? 


Get-Process -Name doesnotexist 
Write-Host -Object "Was the last operation successful? $?" 


Contains the execution status of the last operation. It contains TRUE if the last operation succeeded and FALSE if it 
failed. 


Section 18.5: $error 


Get-Process -Name doesnotexist 
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Write-Host -Object ('The last error that occurred was: {@}' -f Serror[@].Exception.Message) 


Contains an array of error objects that represent the most recent errors. The most recent error is the first error 
object in the array ($Error[0}). 


To prevent an error from being added to the $Error array, use the ErrorAction common parameter with a value of 
Ignore. For more information, see about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216). 
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Chapter 19: Automatic Variables 


Automatic Variables are created and maintained by Windows PowerShell. One has the ability to call a variable just 
about any name in the book; The only exceptions to this are the variables that are already being managed by 
PowerShell. These variables, without a doubt, will be the most repetitious objects you use in PowerShell next to 
functions (like $? - indicates Success/ Failure status of the last operation) 


Section 19.1: $OFS 


Variable called Output Field Separator contains string value that is used when converting an array to a string. By 
default SOFS = " "(a space), but it can be changed: 


PS CiNeaSanhay = 11,2, 3 
PS C:\> "Sarray" # default OFS will be used 


123 

PS C:\> SOFS = ",." # we change OFS to comma and dot 
PS C:\> "Sarray" 

‘ly oan oe) 


Section 19.2: $? 


Contains status of the last operation. When there is no error, it is set to True: 


PS C:\> Write-Host "Hello" 
Hello 

PS C:\> $? 

True 


If there is some error, it is set to False: 


PS C:\> wrt-host 

wrt-host : The term 'wrt-host' is not recognized as the name of a cmdlet, function, script file, 
or operable program. 

Check the spelling of the name, or if a path was included, verify that the path is correct and try 
again. 

At line:1 char:1 

+ wrt-host 


+ CategoryInfo : ObjectNotFound: (wrt-host:String) [], CommandNotFoundException 
+ FullyQualifiedErrorId : CommandNotFoundException 


PS C:\> $? 
False 


Section 19.3: $null 


Snull is used to represent absent or undefined value. 
Snull can be used as an empty placeholder for empty value in arrays: 


PSeGs\e" Salikays= ll estininga soma: 
PS C:\> Sarray.Count 
3 


When we use the same array as the source for ForEach-Object, it will process all three items (including $null): 
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PS C:\> Sarray | ForEach-Object {"Hello"} 
Hello 
Hello 
Hello 


Be careful! This means that ForEach-Object WILL process even Snu11 all by itself: 


PS C:\> Snull | ForEach-Object {"Hello"} # THIS WILL DO ONE ITERATION !!! 
Hello 


Which is very unexpected result if you compare it to classic foreach loop: 


PS C:\> foreach(Si in Snull) {"Hello"} # THIS WILL DO NO ITERATION 
PS C:\> 


Section 19.4: $error 


Array of most recent error objects. The first one in the array is the most recent one: 


PS C:\> throw "Error" # resulting output will be in red font 
Error 

At line:1 char:1 

+e tnGOW ERGO he 


errr mr mirmm mrs rrs, 
+ CategoryInfo : OperationStopped: (Error:String) [], RuntimeException 
+ FullyQualifiedErrorId : Error 


PS C:\> Serror[@] # resulting output will be normal string (not red ) 
Error 


At line:1 char:1 
+ throw "Error" 


Rann 
+ CategoryInfo : OperationStopped: (Error:String) [], RuntimeException 
+ FullyQualifiedErrorId : Error 


Usage hints: When using the Serror variable in a format cmdlet (e.g. format-list), be aware to use the -Force switch. 
Otherwise the format cmdlet is going to output the Serrorcontents in above shown manner. 


Error entries can be removed via e.g. SError.Remove(SError[@]). 


Section 19.5: $pid 


Contains process ID of the current hosting process. 


PS C:\> Spid 
26080 


Section 19.6: Boolean values 

Strue and Sfalse are two variables that represent logical TRUE and FALSE. 

Note that you have to specify the dollar sign as the first character (which is different from C#). 
SboolExpr = “abc".Length -eq 3 # length of "abc" is 3, hence SboolExpr will be True 


if(SboolExpr -eq Strue) { 
"Length is 3" 
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} 
# result will be "Length is 3" 


SboolExpr -ne Strue 
#result will be False 


Notice that when you use boolean true/false in your code you write Strue or $false, but when Powershell returns a 
boolean, it looks like True or False 


Section 19.7: $_ / $PSitem 


Contains the object/item currently being processed by the pipeline. 


PS C:\> 1..5 | % { Write-Host "The current item is $_" } 
The current item is 1 

The current item is 
The current item is 
The current item is 
The current item is 


oR wD 


$PSItem and $_ are identical and can be used interchangeably, but $_ is by far the most commonly used. 


Section 19.8: $PSVersionTable 


Contains a read-only hash table (Constant, AllScope) that displays details about the version of PowerShell that is 
running in the current session. 


SPSVersionTable #this call results in this: 


Name Value 

PSVersion 5.0.10586.117 
PSCompatibleVersions {dG Ze OL 3G eACGh 2) 
BuildVersion 10.0.10586.117 
CLRVersion 4.0.30319.42000 
WSManStackVersion 320 
PSRemotingProtocolVersion 253 
SerializationVersion eles Oral 


The fastest way to get a version of PowerShell running: 


SPSVersionTable.PSVersion 
# result 
Major Minor Build Revision 


5 ) 10586 117 
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Chapter 20: Environment Variables 


Section 20.1: Windows environment variables are visible as a 
PS drive called Env: 


You can see list with all environment variables with: 
Get-Childitem env: 


Section 20.2: Instant call of Environment Variables with $env: 


Senv : COMPUTERNAME 
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Chapter 21: Splatting 


Splatting is a method of passing multiple parameters to a command as a single unit. This is done by storing the 
parameters and their values as key-value pairs in a hashtable and splatting it to a cmdlet using the splatting 
operator @. 


Splatting can make a command more readable and allows you to reuse parameters in multiple command calls. 


Section 21.1: Piping and Splatting 


Declaring the splat is useful for reusing sets of parameters multiple times or with slight variations: 


Ssplat = @{ 
Class = "Win32_SystemEnclosure" 
Property = "Manufacturer" 
ErrorAction = "Stop" 

} 


Get-Wmi0bject -ComputerName Senv:COMPUTERNAME @splat 
Get-WmiObject -ComputerName "Computer2" @splat 
Get-WmiObject -ComputerName "Computer3" @splat 


However, if the splat is not indented for reuse, you may not wish to declare it. It can be piped instead: 
ay 

ComputerName = Senv:COMPUTERNAME 

Class = "Win32_SystemEnclosure" 

Property = "Manufacturer" 


ErrorAction = "Stop" 
} | % { Get-WmidObject @_ } 


Section 21.2: Passing a Switch parameter using Splatting 
To use Splatting to call Get-Process with the -FileVersionInfo switch similar to this: 


Get-Process -FileVersionInfo 
This is the call using splatting: 


SMyParameters = @{ 
FileVersionInfo = Strue 


} 
Get-Process @MyParameters 


Note: This is useful because you can create a default set of parameters and make the call many times like this 


SMyParameters = @{ 
FileVersionInfo = Strue 


} 


Get-Process @MyParameters -Name WmiPrvSE 
Get-Process @MyParameters -Name explorer 
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Section 21.3: Splatting From Top Level Function to a Series of 
Inner Function 


Without splatting it is very cumbersome to try and pass values down through the call stack. But if you combine 
splatting with the power of the @PSBoundParameters then you can pass the top level parameter collection down 
through the layers. 


Function Outer-Method 


{ 
Param 
( 
[string] 
SFirst, 
[string] 
SSecond 
) 
Write-Host (SFirst) -NoNewline 
Inner-Method @PSBoundParameters 
} 
Function Inner-Method 
{ 
Param 
( 
[string] 
$Second 
) 
Write-Host (" {@}!" -f SSecond) 
} 


Sparameters = @{ 
First = "Hello" 
Second = "World" 


Outer-Method @parameters 


Section 21.4: Splatting parameters 


Splatting is done by replacing the dollar-sign $ with the splatting operator @ when using a variable containing a 
HashTable of parameters and values in a command call. 


SMyParameters = @{ 
Name = "iexplore" 
FileVersionInfo = Strue 


} 


Get-Process @MyParameters 


Without splatting: 


Get-Process -Name "iexplore" -FileVersionInfo 
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You can combine normal parameters with splatted parameters to easily add common parameters to your calls. 


SMyParameters = @{ 
ComputerName = "StackOverflow-PC" 
} 


Get-Process -Name "“iexplore" @MyParameters 


Invoke-Command -ScriptBlock { "Something to execute remotely" } @MyParameters 
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Chapter 22: PowerShell "Streams"; Debug, 
Verbose, Warning, Error, Output and 
Information 


Section 22.1: Write-Output 


Write-Output generates output. This output can go to the next command after the pipeline or to the console so it's 
simply displayed. 


The Cmdlet sends objects down the primary pipeline, also known as the "output stream" or the "success pipeline." 
To send error objects down the error pipeline, use Write-Error. 


#1.) Output to the next Cmdlet in the pipeline 
Write-Output 'My text' | Out-File -FilePath "Senv:TEMP\Test.txt" 


Write-Output 'Bob' | ForEach-Object { 
"My name is $_" 


} 


#2.) Output to the console since Write-Output is the last command in the pipeline 
Write-Output ‘Hello world' 


# 3.) ‘Write-Output' CmdLet missing, but the output is still considered to be 'Write-Output' 
"Hello world’ 


1. The Write-Output cmdlet sends the specified object down the pipeline to the next command. 
2. If the command is the last command in the pipeline, the object is displayed in the console. 
3. The PowerShell interpreter treats this as an implicit Write-Output. 


Because Write-Output's default behavior is to display the objects at the end of a pipeline, it is generally not 
necessary to use the Cmdlet. For example, Get-Process | Write-Output is equivalent to Get-Process. 


Section 22.2: Write Preferences 
Messages can be written with; 


Write-Verbose "Detailed Message" 
Write-Information "Information Message" 
Write-Debug "Debug Message" 
Write-Progress "Progress Message" 
Write-Warning "Warning Message" 


Each of these has a preference variable; 


SVerbosePreference = "SilentlyContinue" 
SInformationPreference = "SilentlyContinue" 
$DebugPreference = "SilentlyContinue" 
$ProgressPreference = "Continue" 
SWarningPreference = "Continue" 


The preference variable controls how the message and subsequent execution of the script are handled; 


SInformationPreference = "SilentlyContinue" 
Write-Information "This message will not be shown and execution continues" 
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SInformationPreference = "Continue" 
Write-Information "This message is shown and execution continues" 


SInformationPreference = "Inquire" 
Write-Information "This message is shown and execution will optionally continue" 


SInformationPreference = "Stop" 
Write-Information "This message is shown and execution terminates" 


The color of the messages can be controlled for Write-Error by setting; 


Shost .PrivateData.ErrorBackgroundColor = "Black" 
Shost .PrivateData.ErrorForegroundColor = "Red" 


Similar settings are available for Write-Verbose, Write-Debug and Write-Warning. 
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Chapter 23: Sending Email 


Parameter 


Attachments<String[]> 


Bcc<String[]> 


Body <String > 
BodyAsHtml 


Cc<String[]> 


Credential 


DeliveryNotificationOption 


Details 


Path and file names of files to be attached to the message. Paths and filenames can be 
piped to Send-MailMessage. 


Email addresses that receive a copy of an email message but does not appear as a 
recipient in the message. Enter names (optional) and the email address (required), such 
as Name someone@example.com or someone@example.com. 


Content of the email message. 
It indicates that the content is in HTML format. 


Email addresses that receive a copy of an email message. Enter names (optional) and 
the email address (required), such as Name someone@example.com or 
someone@example.com. 


Specifies a user account that has permission to send message from specified email 
address. The default is the current user. Enter name such as User or Domain\User, or 
enter a PSCredential object. 


Specifies the delivery notification options for the email message. Multiple values can be 
specified. Delivery notifications are sent in message to address specified in To 
parameter. Acceptable values: None, OnSuccess, OnFailure, Delay, Never. 


Encoding for the body and subject. Acceptable values: ASCII, UTF8, UTF7, UTF32, 


EnEGGINE Unicode, BigEndianUnicode, Default, OEM. 
Email addresses from which the mail is sent. Enter names (optional) and the email 
From : 
address (require), such as Name someone@example.com or someone@example.com. 
Alternate port on the SMTP server. The default value is 25. Available from Windows 
Port 
PowerShell 3.0. 
Priority Priority of the email message. Acceptable values: Normal, High, Low. 
Name of the SMTP server that sends the email message. Default value is the value of 
SmtpServer : : 
the $PSEmailServer variable. 
Subject Subject of the email message. 
To Email addresses to which the mail is sent. Enter names (optional) and the email address 
(required), such as Name someone@example.com or someone@example.com 
Usess| Uses the Secure Sockets Layer (SSL) protocol to establish a connection to the remote 


computer to send mail 


A useful technique for Exchange Server administrators is to be able to send email messages via SMTP from 
PowerShell. Depending on the version of PowerShell installed on your computer or server, there are multiple ways 
to send emails via PowerShell. There is a native cmdlet option that is simple and easy to use. It uses the cmdlet 


Send-MailMessage. 


Section 23.1: Send-MailMessage with predefined parameters 


Sparameters = @{ 


From = 'from@bar.com' 


To = 'to@bar.com' 


Subject = ‘Email Subject’ 
Attachments = @('C:\files\samplefile1.txt','C:\files\samplefile2.txt') 


BCC = 'bec@bar.com' 
Body = ‘Email body’ 


BodyAsHTML = SFalse 

CC = ‘cc@bar.com' 

Credential = Get-Credential 
DeliveryNotificationOption = 'onSuccess' 
Encoding = 'UTF8' 

Port = '25' 
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Priority = 'High' 
SmtpServer = 'smtp.com' 
UseSSL = STrue 

} 


# Notice: Splatting requires @ instead of $ in front of variable name 
Send-MailMessage @parameters 


Section 23.2: Simple Send-MailMessage 


Send-MailMessage -From sender@bar.com -Subject "Email Subject" -To receiver@bar.com -SmtpServer 
smtp.com 


Section 23.3: SMTPClient - Mail with .txt file in body message 


# Define the txt which will be in the email body 
SIxtoFile = “c:\file ctxt” 


function Send_mail { 
#Define Email settings 
SEmailFrom = “source@domain.com" 
SEmailTo = "destination@domain.com" 
STxt_Body = Get-Content STxt_File -RAW 
SBody = S$Body_Custom + $Txt_Body 
$Subject = "Email Subject" 
SSMTPServer = "smtpserver .domain.com" 
SSMTPClient = New-Object Net.Mail.SmtpClient(SSmtpServer, 25) 
SSMTPClient.EnableSsl = Sfalse 
SSMTPClient.Send(SEmailFrom, SEmailTo, $Subject, SBody) 


} 


$Body_Custom = "This is what contain file.txt : 


Send_mail 
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Chapter 24: PowerShell Remoting 


Section 24.1: Connecting to a Remote Server via PowerShell 
Using credentials from your local computer: 

Enter-PSSession 192.168.1.1 

Prompting for credentials on the remote computer 


Enter-PSSession 192.168.1.1 -Credential $(Get-Credential) 


Section 24.2: Run commands on a Remote Computer 


Once Powershell remoting is enabled (Enable-PSRemoting) You can run commands on the remote computer like 
this: 


Invoke-Command -ComputerName "RemoteComputerName" -ScriptBlock { 


Write-Host "Remote Computer Name: SENV:ComputerName" 


} 


The above method creates a temporary session and closes it right after the command or scriptblock ends. 


To leave the session open and run other command in it later, you need to create a remote session first: 
SSession = New-PSSession -ComputerName "RemoteComputerName" 
Then you can use this session each time you invoke commands on the remote computer: 


Invoke-Command -Session $Session -ScriptBlock { 
Write-Host "Remote Computer Name: SENV:ComputerName" 


} 


Invoke-Command -Session $Session -ScriptBlock { 
Get-Date 
} 


If you need to use different Credentials, you can add them with the -Credential Parameter: 


SCred = Get-Credential 
Invoke-Command -Session SSession -Credential $Cred -ScriptBlock {...} 


Remoting serialization warning 


Note: 


It is important to know that remoting serializes PowerShell objects on the remote system and deserializes 
them on your end of the remoting session, i.e. they are converted to XML during transport and lose all of 
their methods. 


Soutput = Invoke-Command -Session SSession -ScriptBlock { 
Get-WmiObject -Class win32_printer 


} 
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Soutput Get-Member -MemberType Method 


TypeName: Deserialized.System.Management .ManagementObject#root\cimv2\Win32_Printer 


Name MemberType Definition 
GetType Method type GetType() 
ToString Method string ToString(), string ToString(string format, System.IFormatProvi... 


Whereas you have the methods on the regular PS object: 


Get-WmiObject -Class win32_printer | Get-Member -MemberType Method 


TypeName: System.Management .ManagementObject#root\cimv2\Win32_Printer 


Name MemberType Definition 

CancelAllJobs Method System.Management .ManagementBaseObject CancelAllJobs() 
GetSecurityDescriptor Method System.Management .ManagementBaseObject GetSecurityDescriptor () 
Pause Method System.Management .ManagementBaseObject Pause() 

PrintTestPage Method System.Management .ManagementBaseObject PrintTestPage() 
RenamePrinter Method System.Management .ManagementBaseObject RenamePrinter (System.String 
NewPrinterName) 

Reset Method System.Management .ManagementBaseObject Reset() 

Resume Method System.Management .ManagementBaseObject Resume() 

SetDefaultPrinter Method System.Management .ManagementBaseObject SetDefaultPrinter() 
SetPowerState Method System.Management .ManagementBaseObject SetPowerState(System.UInt16 
PowerState, System.String Time) 

SetSecurityDescriptor Method System.Management .ManagementBaseObject 


SetSecurityDescriptor (System.Management .ManagementObject#Win32_SecurityDescriptor Descriptor) 


Argument Usage 


To use arguments as parameters for the remote scripting block, one might either use the ArgumentList parameter 
of Invoke-Command, or use the SUsing: syntax. 


Using ArgumentList with unnamed parameters (i.e. in the order they are passed to the scriptblock): 


SservicesToShow "servicel" 

SfileName "C:\temp\servicestatus.csv" 

Invoke-Command -Session Ssession -ArgumentList SservicesToShow, $fileName -ScriptBlock { 
Write-Host "Calling script block remotely with $(SArgs.Count)" 
Get-Service -Name Sargs[@] 
Remove-Item -Path Sargs[1] -ErrorAction SilentlyContinue -Force 


Using ArgumentList with named parameters: 


SservicesToShow "servicel" 

S$fileName "C:\temp\servicestatus.csv" 

Invoke-Command -Session Ssession -ArgumentList SservicesToShow, $fileName -ScriptBlock { 
Param(SserviceToShowInRemoteSession, $fileToDelete) 
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Write-Host "Calling script block remotely with $(SArgs.Count)" 
Get-Service -Name SserviceToShowInRemoteSession 
Remove-Item -Path SfileToDelete -ErrorAction SilentlyContinue -Force 


Using SUsing: syntax: 


SservicesToShow "servicel" 
SfileName "C:\temp\servicestatus.csv" 
Invoke-Command -Session Ssession -ScriptBlock { 
Get-Service SUsing:servicesToShow 
Remove-Item -Path SfileName -ErrorAction SilentlyContinue -Force 


Section 24.3: Enabling PowerShell Remoting 


PowerShell remoting must first be enabled on the server to which you wish to remotely connect. 


Enable-PSRemoting -Force 


This command does the following: 


Runs the Set-WSManQuickConfig cmdlet, which performs the following tasks: 

Starts the WinRM service. 

Sets the startup type on the WinRM service to Automatic. 

Creates a listener to accept requests on any IP address, if one does not already exist. 

Enables a firewall exception for WS-Management communications. 

Registers the Microsoft.PowerShell and Microsoft.PowerShell.Workflow session configurations, if it they are 
not already registered. 

Registers the Microsoft.PowerShell32 session configuration on 64-bit computers, if it is not already 
registered. 

Enables all session configurations. 

Changes the security descriptor of all session configurations to allow remote access. 

Restarts the WinRM service to make the preceding changes effective. 


Only for non-domain environments 


For servers in an AD Domain the PS remoting authentication is done through Kerberos (‘Default’), or NTLM 
(‘Negotiate’). If you want to allow remoting to a non-domain server you have two options. 


Either set up WSMan communication over HTTPS (which requires certificate generation) or enable basic 
authentication which sends your credentials across the wire base64-encoded (that's basically the same as plain-text 
so be careful with this). 


In either case you'll have to add the remote systems to your WSMan trusted hosts list. 


Enabling Basic Authentication 
Set-Item WSMan:\localhost\Service\AllowUnencrypted Strue 


Then on the computer you wish to connect from, you must tell it to trust the computer you're connecting to. 


Set-Item WSMan:\localhost\Client\TrustedHosts '192.168.1.1,192.168.1.2' 
Set-Item WSMan:\localhost\Client\TrustedHosts *.contoso.com 


Set-Item WSMan:\localhost\Client\TrustedHosts + 
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Important: You must tell your client to trust the computer addressed in the way you want to connect (e.g. if you 
connect via IP, it must trust the IP not the hostname) 


Section 24.4: A best practise for automatically cleaning-up 
PSSessions 


When a remote session is created via the New-PSsession cmdlet, the PSSession persists until the current 
PowerShell session ends. Meaning that, by default, the PSSession and all associated resources will continue to be 
used until the current PowerShell session ends. 


Multiple active PSSessions can become a strain on resources, particularly for long running or interlinked scripts 
that create hundreds of PSSessions in a single PowerShell session. 


It is best practise to explicitly remove each PSSession after it is finished being used. [1] 


The following code template utilises try-catch- finally in order to achieve the above, combining error handling 
with a secure way to ensure all created PSSessions are removed when they are finished being used: 


try 
{ 

Ssession = New-PSsession -Computername "RemoteMachineName" 

Invoke-Command -Session Ssession -ScriptBlock {write-host "This is running on 
SENV :ComputerName" } 


} 
catch 
{ 
Write-Output "ERROR: $_" 
} 
finally 
{ 
if (Ssession) 
{ 
Remove-PSSession Ssession 
} 
} 


References: [1] 
https://msdn.microsoft.com/en-us/powershell/reference/5.1/microsoft.powershell.core/new-pssession 
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Chapter 25: Working with the PowerShell 
pipeline 


PowerShell introduces an object pipelining model, which allows you to send whole objects down through the 
pipeline to consuming commandlets or (at least) the output. In contrast to classical string-based pipelining, 
information in piped objects don't have to be on specific positions. Commandlets can declare to interact with 
Objects from the pipeline as input, while return values are sent to the pipeline automatically. 


Section 25.1: Writing Functions with Advanced Lifecycle 


This example shows how a function can accept pipelined input, and iterate efficiently. 


Note, that the begin and end structures of the function are optional when pipelining, but that process is required 
when using ValueF romPipeline or ValueFromPipelineByPropertyName. 


function Write-FromPipeline{ 
[CmdletBinding()] 


param( 
[ Parameter(ValueFromPipeline) ] 
SmyInput 
) 
begin { 
Write-Verbose -Message "Beginning Write-FromPipeline" 
} 
process { 
Write-Output -InputObject SmyInput 
} 
end { 
Write-Verbose -Message "Ending Write-FromPipeline" 
} 


} 
Sfoor= hello. world. d<2.3 


Sfoo | Write-FromPipeline -Verbose 


Output: 


VERBOSE: Beginning Write-FromPipeline 
hello 

world 

1 

2. 

3 

VERBOSE: Ending Write-FromPipeline 


Section 25.2: Basic Pipeline Support in Functions 


This is an example of a function with the simplest possible support for pipelining. 
Any function with pipeline support must have at least one parameter with the ParameterAttribute 
ValueFromPipeline or ValueFromPipelineByPropertyName set, as shown below. 


function Write-FromPipeline { 
param( 
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[Parameter(ValueFromPipeline)] # This sets the ParameterAttribute 
[String]$Input 


) 
Write-Host SInput 


} 


Sfoo = ‘Hello World!' 


Sfoo | Write-FromPipeline 


Output: 


Hello World! 


Note: In PowerShell 3.0 and above, Default Values for ParameterAttributes is supported. In earlier versions, you 
must specify ValueFromPipeline=Strue. 


Section 25.3: Working concept of pipeline 


In a pipeline series each function runs parallel to the others, like parallel threads. The first processed object is 
transmitted to the next pipeline and the next processing is immediately executed in another thread. This explains 
the high speed gain compared to the standard ForEach 


@( bigFile_1, bigFile_2, ..., bigFile_n) | Copy-File | Encrypt-File | Get-Md5 


1. step - copy the first file (in Copy-file Thread) 

2. step - copy second file (in Copy- file Thread) and simultaneously Encrypt the first (in Encrypt-File) 

3. step - copy third file (in Copy- file Thread) and simultaneously encrypt second file (in Encrypt-File) and 
simultaneously get-Md5 of the first (in Get-Md5) 
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Chapter 26: PowerShell Background Jobs 


Jobs were introduced in PowerShell 2.0 and helped to solve a problem inherent in the command-line tools. In a 
nutshell, if you start a long running task, your prompt is unavailable until the task finishes. As an example of a long 
running task, think of this simple PowerShell command: 


Get-Childitem -Path c:\ -Recurse 


It will take a while to fetch full directory list of your C: drive. If you run it as Job then the console will get the control 
back and you can capture the result later on. 


Section 26.1: Basic job creation 
Start a Script Block as background job: 

Sjob = Start-Job -ScriptBlock {Get-Process} 

Start a script as background job: 

$job = Start-Job -FilePath "C:\YourFolder\Script.ps1" 
Start a job using Invoke-Command on a remote machine: 


$job = Invoke-Command -ComputerName "ComputerName" -ScriptBlock {Get-Service winrm} -JobName 
"WinRM" -ThrottleLimit 16 -AsJob 


Start job as a different user (Prompts for password): 

Start-Job -ScriptBlock {Get-Process} -Credential "Domain\Username" 
Or 

Start-Job -ScriptBlock {Get-Process} -Credential (Get-Credential) 
Start job as a different user (No prompt): 


Susername = "Domain\Username" 

Spassword = "password" 

SsecPassword = ConvertTo-SecureString -String Spassword -AsPlainText -Force 

Scredentials = New-Object System.Management .Automation.PSCredential -ArgumentList @(Susername, 
SsecPassword) 

Start-Job -ScriptBlock {Get-Process} -Credential Scredentials 


Section 26.2: Basic job management 
Get a list of all jobs in the current session: 

Get-Job 

Waiting on a job to finish before getting the result: 


S$job | Wait-job | Receive-Job 
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Timeout a job if it runs too long (10 seconds in this example) 
S$job | Wait-job -Timeout 10 
Stopping a job (completes all tasks that are pending in that job queue before ending): 
$job | Stop-Job 
Remove job from current session's background jobs list: 
$job | Remove-Job 


Note: The following will only work on Workflow Jobs. 


Suspend a Workflow Job (Pause): 
$job | Suspend-Job 
Resume a Workflow Job: 


$job | Resume-Job 
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Chapter 27: Return behavior in PowerShell 


It can be used to Exit the current scope, which can be a function, script, or script block. In PowerShell, the result of 
each statement is returned as output, even without an explicit Return keyword or to indicate that the end of the 
scope has been reached. 


Section 27.1: Early exit 


function earlyexit { 
"Hello" 
return 
"World" 


"Hello" will be placed in the output pipeline, "World" will not 


Section 27.2: Gotcha! Return in the pipeline 
get-childitem | foreach-object { if (S_.IsReadOnly) { return } } 


Pipeline cmdlets (ex: ForEach-Object, Where-Object, etc) operate on closures. The return here will only move to the 
next item on the pipeline, not exit processing. You can use break instead of return if you want to exit processing. 


get-childitem | foreach-object { if (S_.IsReadOnly) { break } } 


Section 27.3: Return with a value 


(paraphrased from about return) 


The following methods will have the same values on the pipeline 


function foo { 


Sa = "Hello" 
return Sa 

} 

function bar { 
Sa = "Hello" 
Sa 
return 

} 

function quux { 
Sa = "Hello" 
Sa 


Section 27.4: How to work with functions returns 


A function returns everything that is not captured by something else. 
If u use the return keyword, every statement after the return line will not be executed! 


Like this: 
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Function Test-Function 


{ 
Param 
( 
[ switch]SExceptionalReturn 
) 
wSitaltte 
if(SExceptionalReturn) {Return "Damn, it didn't work!"} 
New-ItemProperty -Path "HKCU:\" -Name "test" -Value "TestValue" -Type "String" 
Return "Yes, it worked!" 
} 
Test-Function 
Will return: 
e Start 


e The newly created registry key (this is because there are some statements that create output that you may 


not be expecting) 
e Yes, it worked! 


Test-Function -ExceptionalReturn Will return: 


e Start 
e Damn, it didn't work! 


If you do it like this: 


Function Test-Function 


{ 
Param 
( 
[ switch]SExceptionalReturn 
) 
{ 
BS alates 
if (SExceptionalReturn) 
{ 
SReturn = "Damn, it didn't work!" 
Return 
} 
New-ItemProperty -Path "HKCU:\" -Name "test" -Value "TestValue" -Type "String" 
SReturn "Yes, it worked!" 
Return 
} | Out-Null 
Return SReturn 
} 


Test-Function 
Will return: 


e Yes, it worked! 
Test-Function -ExceptionalReturn Will return: 
e Damn, it didn't work! 


With this trick you can control the returned output even if you are not sure what will each statement will spit out. 
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It works like this 


.{<Statements>} | Out-Null 


the . makes the following scriptblock included in the code 
the {} marks the script block 


the | Out-Null pipes any unexpected output to Out-Null (so it is gone!) 


Because the scriptblock is included it gets the same scope as the rest of the function. 
So you can access variables who were made inside the scriptblock. 


Section 27.5: Gotcha! Ignoring unwanted output 
Inspired by 


e PowerShell: Function doesn't have proper return value 


function bar { 
[System.Collections.ArrayList]SMyVariable = @() 
SMyVariable.Add("a") | Out-Null 
SMyVariable.Add("b") | Out-Null 

SMyVariable 
: 


The Out-Null is necessary because the .NET ArrayList .Add method returns the number of items in the collection 
after adding. If omitted, the pipeline would have contained1, 2, "a", “b" 


There are multiple ways to omit unwanted output: 


function bar 


{ 
# New-Item cmdlet returns information about newly created file/folder 
New-Item "test1.txt" | out-null 
New-Item "test2.txt" > Snull 
[void](New-Item "test3.txt") 
Stmp = New-Item "test4.txt" 
} 


Note: to learn more about why to prefer > Snu1l, see [topic not yet created]. 
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Chapter 28: CSV parsing 


Section 28.1: Basic usage of Import-Csv 


Given the following CSV-file 


String,DateTime, Integer 

First, 2016-12-01T12:00:00,30 
Second, 2015-12-01T12:00:00,20 
Third, 2015-12-01T12:00:00,20 


One can import the CSV rows in PowerShell objects using the Import-Csv command 


> $listOfRows = Import-Csv .\example.csv 
> SlistOfRows 


String DateTime Integer 


First 2016-12-01T12:00:00 30 
Second 2015-11-03T13:00:00 20 
Third 2015-12-05T14:00:00 20 


> Write-Host Srow[@].String1 


Third 


Section 28.2: Import from CSV and cast properties to correct 
type 


By default, Import-CSV imports all values as strings, so to get DateTime- and integer-objects, we need to cast or 
parse them. 


Using Foreach-Object: 


> SlistOfRows = Import-Csv .\example.csv 
> $listOfRows | ForEach-Object { 
#Cast properties 
S_.DateTime = [datetime]S_.DateTime 
S_.Integer = [int]S$_.Integer 


#O0utput object 
$_ 
Using calculated properties: 


> $listOfRows = Import-Csv .\example.csv 

> SlistOfRows | Select-Object String, 
@{name="DateTime" ;expression={ [datetime]S_.DateTime }}, 
@{name="Integer";expression={ [int]S_.Integer }} 


Output: 
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String DateTime Integer 


First 01.12.2016 12:00:00 30 
Second 03.11.2015 13:00:00 20 
Third 05.12.2015 14:00:00 20 


Goalkicker.com - PowerShell® Notes for Professionals 


72 


Chapter 29: Working with XML Files 


Section 29.1: Accessing an XML File 


<!-- file.xml --> 
<people> 
<person id="101"> 
<name>Jon Lajoie</name> 
<age>22</age> 
</person> 
<person id="102"> 
<name>Lord Gaben</name> 
<age>65</age> 
</person> 
<person id="103"> 
<name>Gordon Freeman</name> 
<age>29</age> 
</person> 
</people> 


Loading an XML File 
To load an XML file, you can use any of these: 


# First Method 

Sxdoc = New-Object System. Xm1.Xm1Document 
Sfile = Resolve-Path(".\file.xm1" ) 
$xdoc.load(S$file) 


# Second Method 
[xml] S$xdoc = Get-Content ".\file.xml1" 


# Third Method 
$xdoc = [xml] (Get-Content ".\file.xml") 


Accessing XML as Objects 


PS C:\> Sxml = [xml](Get-Content file.xm1) 
PS C:\> $xml1 


PS C:\> Sxml.people 
person 


{Jon Lajoie, Lord Gaben, Gordon Freeman} 


PS C:\> Sxml.people.person 


id name 

101 Jon Lajoie 

102 Lord Gaben 

103 Gordon Freeman 


PS C:\> Sxml.people.person[@] .name 
Jon Lajoie 


PS C:\> Sxml.people.person[1].age 
65 
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age 
22 
65 
29 


80 


PS C:\> Sxml.people.person[2] .id 
103 


Accessing XML with XPath 


PS C:\> Sxml = [xml](Get-Content file.xm1l) 
PS C:\> $xml1 


PS C:\> Sxml.SelectNodes("//people") 
person 
{Jon Lajoie, Lord Gaben, Gordon Freeman} 


PS C:\> Sxml.SelectNodes("//people//person" ) 


id name age 
101 Jon Lajoie 22 
102 Lord Gaben 65 
103 Gordon Freeman 29 


PS C:\> Sxml1.SelectSingleNode("people//person[1]//name" ) 
Jon Lajoie 


PS C:\> Sxml.SelectSingleNode("people//person[2]//age") 
65 


PS C:\> Sxml.SelectSingleNode("people//person[3]//@id" ) 
103 


Accessing XML containing namespaces with XPath 


PS C:\> [xml1]Sxml = @" 
<ns:people xmlns:ns="http://schemas.xmlsoap.org/soap/envelope/"> 
<ns:person id="101"> 
<ns:iname>Jon Lajoie</ns :name> 
</ns:person> 
<ns:person id="102"> 
<ns:name>Lord Gaben</ns :name> 
</ns:person> 
<ns:person id="103"> 
<ns :name>Gordon Freeman</ns :name> 
</ns:person> 
</ns:people> 
"@ 


PS C:\> Sns = new-object Xml1.Xm1lNamespaceManager Sxml.NameTable 
PS C:\> Sns.AddNamespace("ns", Sxml1.DocumentElement .NamespaceURT) 
PS C:\> Sxml.SelectNodes("//ns:people/ns:person", Sns) 


id name 

101 Jon Lajoie 

102 Lord Gaben 

103 Gordon Freeman 


Section 29.2: Creating an XML Document using XmIlWriterQ 


# Set The Formatting 
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Sxmlsettings = New-Object System. Xm1.XmlWriterSettings 
Sxmlsettings.Indent = Strue 
Sxmlsettings.IndentChars = " . 

# Set the File Name Create The Document 

$XmlWriter = [System.XML.XmlWriter]::Create("C:\YourXML.xml", Sxmlsettings) 


# Write the XML Declaration and set the XSL 
SxmlWriter .WriteStartDocument() 
SxmlWriter .WriteProcessingInstruction("xml-stylesheet", "type='text/xsl' href='style.xsl'") 


# Start the Root Element 
SxmlWriter .WriteStartElement( "Root" ) 


SxmlWriter .WriteStartElement("Object") # <-- Start <Object> 


SxmlWriter .WriteElementString("Property1", "Value 1") 
SxmlWriter .WriteElementString("Property2", "Value 2") 


SxmlWriter .WriteStartElement("SubObject") # <-- Start <SubObject> 
SxmlWriter .WriteElementString("Property3", "Value 3") 
SxmlWriter.WriteEndElement() # <-- End <SubObject> 


SxmlWriter.WriteEndElement() # <-- End <Object> 
SxmlWriter.WriteEndElement() # <-- End <Root> 


# End, Finalize and close the XML Document 
SxmlWriter .WriteEndDocument() 

S$xmlWriter .Flush() 

SxmlWriter .Close() 


Output XML File 


<?xml version="1.0" encoding="utf-8"?> 
<?xml-stylesheet type='text/xsl' href='style.xsl'?> 
<Root> 
<Object> 
<Property1>Value 1</Property1> 
<Property2>Value 2</Property2> 
<SubObject> 
<Property3>Value 3</Property3> 
</SubObject> 
</Object> 
</Root> 


Section 29.3: Adding snippets of XML to current XMLDocument 


Sample Data 
XML Document 


First, let's define a sample XML document named "books.xml" in our current directory: 


<?xml version="1.@" encoding="UTF-8"?> 
<books> 
<book> 
<title>Of Mice And Men</title> 
<author>John Steinbeck</author> 
<pageCount>187</pageCount> 
<publishers> 
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<publisher> 
<isbn>978-88-58702-15-4</isbn> 
<name>Pascal Covici</name> 
<year>1937</year> 
<binding>Hardcover</binding> 
<first>true</first> 
</publisher> 
<publisher> 
<isbn>978-05-82461-46-8</isbn> 
<name>Longman</name> 
<year>2009</year> 
<binding>Hardcover</binding> 
</publisher> 
</publishers> 
<characters> 
<character name="Lennie Small" /> 
<character name="Curley's Wife" /> 
<character name="George Milton" /> 
<character name="Curley" /> 
</characters> 
<film>True</film> 
</book> 
<book> 


<title>The Hunt for Red October</title> 


<author>Tom Clancy</author> 
<pageCount>387</pageCount> 
<publishers> 
<publisher> 
<isbn>978-08-70212-85-7</isbn> 


<name>Naval Institute Press</name> 


<year>1984</year> 
<binding>Hardcover</binding> 
<first>true</first> 
</publisher> 
<publisher> 
<isbn>978-04-25083-83-3</isbn> 
<name>Berkley</name> 
<year>1986</year> 
<binding>Paperback</binding> 
</publisher> 
<publisher> 
<isbn>978-08-08587-35-4</isbn> 
<name>Penguin Putnam</name> 
<year>2010</year> 
<binding>Paperback</binding> 
</publisher> 
</publishers> 
<characters> 


<character name="Marko Alexadrovich Ramius 


<character name="Jack Ryan" /> 
<character name="Admiral Greer" /> 
<character name="Bart Mancuso" /> 


<character name="Vasily Borodin" /> 


</characters> 
<film>True</film> 
</book> 
</books> 


New Data 


What we want to do is add a few new books to this document, let's say Patriot Games by Tom Clancy (yes, I'm a fan 
of Clancy's works “__4) and a Sci-Fi favourite: The Hitchhiker's Guide to the Galaxy by Douglas Adams mainly because 
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Zaphod Beeblebrox is just fun to read. 
Somehow we've acquired the data for the new books and saved them as a list of PSCustomObjects: 


SnewBooks = @( 
[PSCustomObject] @{ 
"Title" "Patriot Games"; 
"Author" vmomeaGlancy s: 
"PageCount" 54@; 
"Publishers" = @( 
[PSCustomObject] @{ 


"ISBN" = "978-@-39-913241-4": 
"Year" me Same 
"First" = STrue; 
"Name" "Putnam" ; 
"Binding" "Hardcover" ; 
} 
Dy 
"Characters" = @( 
"Jack Ryan", "Prince of Wales", "Princess of Wales" 
"Robby Jackson", "Cathy Ryan", "Sean Patrick Miller" 
ye 
line =" Sipe: 
} 
[PSCustomObject] @{ 
"Title" "The Hitchhiker's Guide to the Galaxy"; 
"Author" = "Douglas Adams"; 
"PageCount" Pee 
"Publishers" = @( 
[PSCustomObject] @{ 
"TSBN" "978-0-33-025864-7"; 
"Year" pO Ou: 
Tans: STrue; 
"Name" "Pan Books"; 
"Binding" "Hardcover" ; 
} 
We 
"Characters" = @( 
"Arthur Dent", "Marvin", "Zaphod Beeblebrox", "Ford Prefect", 
"Trillian", "Slartibartfast", "Dirk Gently" 
e 
Pe ildlinn = Sieve: 
} 
ye 
Templates 


Now we need to define a few skeleton XML structures for our new data to go into. Basically, you want to create a 
skeleton/template for each list of data. In our example, that means we need a template for the book, characters, 
and publishers. We can also use this to define a few default values, such as the value for the film tag. 


St_book [xml] @' 
<book> 
<title /> 
<author /> 
<pageCount /> 
<publishers /> 
<characters /> 
<film>False</film> 
</book> 
'@: 
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St_publisher = [xml] @' 
<publisher> 
<isbn/> 
<name/> 
<year/> 
<binding/> 
<first>false</first> 
</publisher> 
'@: 


St_character = [xml] @' 
<character name="" /> 
‘@: 
We're done with set-up. 
Adding the new data 


Now that we're all set-up with our sample data, let's add the custom objects to the XML Document Object. 


# Read the xml document 
Sxml = [xml] Get-Content .\books.xml; 


# Let's show a list of titles to see what we've got currently: 
Sxml.books.book | Select Title, Author, @{N="ISBN";E={If ( S_.Publishers.Publisher.Count ) { 
S_.Publishers.publisher[9].ISBN} Else { $_.Publishers.publisher .isbn}}};; 


# Outputs: 

# title author ISBN 
rr Sor 

# Of Mice And Men John Steinbeck 978-88-58702-15-4 
# The Hunt for Red October Tom Clancy 978-08-70212-85-7 


# Let's show our new books as well: 
SnewBooks | Select Title, Author, @{N="ISBN";E={S_.Publishers[Q].ISBN}}; 


# Outputs: 

# Title Author ISBN 
rr Se 

# Patriot Games Tom Clancy 978-8-39-913241-4 


# The Hitchhiker's Guide to the Galaxy Douglas Adams 978-0-33-025864-7 
# Now to merge the two: 


ForEach ( Sbook in SnewBooks ) { 
Sroot = $xml1.SelectSingleNode("/books"); 


# Add the template for a book as a new node to the root element 
[void]Sroot .AppendChild(S$xml.ImportNode(St_book.book, Strue)); 


# Select the new child element 
SnewElement = Sroot.SelectSingleNode( "book[last()]"); 


# Update the parameters of that new element to match our current new book data 


SnewElement.title = [String]Sbook.Title; 
SnewElement.author = [String]Sbook.Author; 
SnewElement.pageCount = [String]Sbook.PageCount; 
SnewElement.film = [String]Sbook.Film; 


# Iterate through the properties that are Children of our new Element: 
ForEach ( Spublisher in Sbook.Publishers ) { 
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# Create the new child publisher element 

# Note the use of "SelectSingleNode" here, this allows the use of the "AppendChild" method 
as it returns 

# a XmlElement type object instead of the $Null data that is currently stored in that leaf 
of the 

# XML document tree 


[ void]SnewElement .SelectSingleNode( "publishers" ) .AppendChild(Sxml.ImportNode(St_publisher .publisher 
, Strue)); 


# Update the attribute and text values of our new XML Element to match our new data 
SnewPublisherElement = SnewElement.SelectSingleNode("publishers/publisher[last()]"); 
SnewPublisherElement.year = [String]Spublisher.Year; 
SnewPublisherElement.name = [String]Spublisher.Name; 
SnewPublisherElement.binding = [String]Spublisher .Binding; 
SnewPublisherElement.isbn = [String]Spublisher.ISBN; 
If ( Spublisher.first ) { 
SnewPublisherElement.first = "True"; 
} 
} 


ForEach ( Scharacter in Sbook.Characters ) { 
# Select the characters xml element 
ScharactersElement = SnewElement.SelectSingleNode("characters") ; 


# Add a new character child element 
[ void]ScharactersElement.AppendChild(S$xml.ImportNode(St_character.character, Strue)); 


# Select the new characters/character element 
ScharacterElement = ScharactersElement.SelectSingleNode("character[last()]"); 


# Update the attribute and text values to match our new data 
ScharacterElement.name = [String]Scharacter; 


} 


# Check out the new XML: 
Sxml.books.book | Select Title, Author, @{N="ISBN";E={If ( S_.Publishers.Publisher.Count ) { 
S_.Publishers.publisher[@].ISBN} Else { $_.Publishers.publisher .isbn}}}; 


# Outputs: 

# title author ISBN 
rr See 

# Of Mice And Men John Steinbeck 978-88-58702-15-4 
# The Hunt for Red October Tom Clancy 978-08-70212-85-7 
# Patriot Games Tom Clancy 978-0-39-913241-4 


# The Hitchhiker's Guide to the Galaxy Douglas Adams 978-@-33-025864-7 


We can now write our XML to disk, or screen, or web, or wherever! 

Profit 

While this may not be the procedure for everyone | found it to help avoid a whole bunch of 
[void]$xml.SelectSingleNode("/complicated/xpath/goes[here]") .AppendChild($xml.CreateElement( "newEle 
mentName") followed by $xml.SelectSingleNode("/complicated/xpath/goes/here/newElementName") = 
StextValue 


| think the method detailed in the example is cleaner and easier to parse for normal humans. 


Improvements 
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It may be possible to change the template to include elements with children instead of breaking out each section as 
a separate template. You just have to take care to clone the previous element when you loop through the list. 
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—— 30: Communicating with RESTful 
S 


REST stands for Representational State Transfer (sometimes spelled "ReST"). It relies on a stateless, client-server, 
cacheable communications protocol and mostly HTTP protocol is used. It is primarily used to build Web services 
that are lightweight, maintainable, and scalable. A service based on REST is called a RESTful service and the APIs 

which are being used for it are RESTful APls. In PowerShell, Invoke-RestMethod is used to deal with them. 


Section 30.1: Post Message to hipChat 


Sparams = @{ 
Uri = "https://your .hipchat .com/v2/room/934419/notification?auth_token=???" 
Method = "POST" 


Body = @{ 
color = ‘yellow' 
message = "This is a test message!" 
notify = Sfalse 
message_format = "text" 


} | ConvertTo-Json 
ContentType = ‘application/json' 
: 


Invoke-RestMethod @params 


Section 30.2: Using REST with PowerShell Objects to GET and 
POST many items 


GET your REST data and store in a PowerShell object: 
SUsers = Invoke-RestMethod -Uri "http://jsonplaceholder .typicode.com/users" 
Modify many items in your data: 


SUsers[@].name = "John Smith" 


SUsers[@].email = "“John.Smith@example.com" 
SUsers[1].name = "Jane Smith" 
SUsers[1].email = "Jane.Smith@example.com" 


POST all of the REST data back: 


SJson = SUsers | ConvertTo-Json 
Invoke-RestMethod -Method Post -Uri "http://jsonplaceholder.typicode.com/users" -Body SJson - 
ContentType ‘application/json' 


Section 30.3: Use Slack.com Incoming Webhooks 
Define your payload to send for possible more complex data 
SPayload = @{ text="test string"; username="testuser" } 


Use ConvertTo-Json cmdlet and Invoke-RestMethod to execute the call 


Invoke-RestMethod -Uri "https://hooks.slack.com/services/yourwebhookstring" -Method Post -Body 
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(ConvertTo-Json $Payload) 


Section 30.4: Using REST with PowerShell Objects to Get and 
Put individual data 


GET your REST data and store in a PowerShell object: 

SPost = Invoke-RestMethod -Uri "http://jsonplaceholder.typicode.com/posts/1" 
Modify your data: 

$Post.title = "New Title" 

PUT the REST data back 


SJson = SPost | ConvertTo-Json 
Invoke-RestMethod -Method Put -Uri "“http://jsonplaceholder.typicode.com/posts/1" -Body SJson - 
ContentType ‘application/json' 


Section 30.5: Using REST with PowerShell to Delete items 


Identify the item that is to be deleted and delete it: 


Invoke-RestMethod -Method Delete -Uri "http://jsonplaceholder .typicode.com/posts/1" 


Goalkicker.com - PowerShell® Notes for Professionals 


89 


Chapter 31: PowerShell SOL queries 


Item Description 
$Serverlnstance Here we have to mention the instance in which the database is present 
$Database Here we have to mention the database in which the table is present 
$Query Here we have to the query which you we want to execute in SQ 


$Username & $Password UserName and Password which have access in database 
By going through this document You can get to know how to use SQL queries with PowerShell 


Section 31.1: SOQLExample 


For querying all the data from table MachineName we can use the command like below one. 
$Query="Select * from MachineName" 

$Inst="Serverlnstance" 

$DbName="DatabaseName 

$UID="User ID" 

$Password="Password" 


Invoke-Sqlemd2 -Serverinstance SInst -Database SDBName -query SQuery -Username SUID -Password 
$Password 


Section 31.2: SOQLQuery 


For querying all the data from table MachineName we can use the command like below one. 
$Query="Select * from MachineName" 

$Inst="Serverlnstance" 

$DbName="DatabaseName 

$UID="User ID" 

$Password="Password" 


Invoke-Sqlcemd2 -Serverinstance SInst -Database SDBName -query SQuery -Username SUID -Password 
$Password 
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Chapter 32: Regular Expressions 
Section 32.1: Single match 


You can quickly determine if a text includes a specific pattern using Regex. There are multiple ways to work with 
Regex in PowerShell. 


#Sample text 

Stext = @" 

This is (a) sample 
text, this is 

a (sample text) 

"@ 


#Sample pattern: Content wrapped in () 
Spatternn = eV .47\ i 


Using the -Match operator 


To determine if a string matches a pattern using the built-in -matches operator, use the syntax ‘input’ -match 
‘pattern’. This will return true or false depending on the result of the search. If there was match you can view 
the match and groups (if defined in pattern) by accessing the SMatches-variable. 


> $text -match Spattern 
True 


> SMatches 


Name Value 


You can also use -match to filter through an array of strings and only return the strings containing a match. 


> Stextarray = @" 
This is (a) sample 
text, this is 

a (sample text) 

Ox] Spisete im 


> Stextarray -match Spattern 
This is (a) sample 

a (sample text) 

Version = 2.0 


Using Select-String 


PowerShell 2.0 introduced a new cmdlet for searching through text using regex. It returns a MatchInfo object per 
textinput that contains a match. You can access it's properties to find matching groups etc. 


> $m = Select-String -InputObject Stext -Pattern Spattern 
> Sm 

This is (a) sample 

text, this is 

a (sample text) 


> Sm | Format-List * 
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IgnoreCase : True 
LineNumber : 1 
Line : This is (a) sample 
text, this is 
a (sample text) 
Filename : InputStream 
Path : InputStream 
Pattern ANGER ANy) 
Context : 
Matches {(a) } 


Like -match, Select String can also be used to filter through an array of strings by piping an array to it. It creates a 
MatchInfo-object per string that includes a match. 


Stextarray | Select-String -Pattern Spattern 


This is (a) sample 
a (sample text) 


#You can also access the matches, groups etc. 
Stextarray | Select-String -Pattern Spattern | fl 


IgnoreCase : True 
LineNumber : 1 

Line : This is (a) sample 
Filename : InputStream 
Path : InputStream 
Pattern DT NGeN) 

Context 

Matches {(a) } 
IgnoreCase : True 

LineNumber : 3 

Line : a (sample text) 
Filename : InputStream 
Path : InputStream 
Pattern N(R 2Ny) 

Context 

Matches : {(sample text) } 


Select String can also search using a normal text-pattern (no regex) by adding the -SimpleMatch switch. 
Using [RegEx]::Match() 
You can also use the static Match() method available in the .NET [RegEx]-class. 


[ regex]: :Match(Stext, Spattern) 


Groups : {(a)} 
Success : True 
Captures : {(a)} 
Index 38 
Length eo 
Value : (a) 


[regex] ::Match(Stext,Spattern) | Select-Object -ExpandProperty Value 
(a) 


Goalkicker.com - PowerShell® Notes for Professionals 92 


Section 32.2: Replace 


A common task for regex is to replace text that matches a pattern with a new value. 


#Sample text 

Stext = @" 

This is (a) sample 
text, this is 

a (sample text) 

"@ 


#Sample pattern: Text wrapped in () 
Spattern = '\(.*?\)' 


#Replace matches with: 
Snewvalue = ‘test’ 


Using -Replace operator 


The - replace operator in PowerShell can be used to replace text matching a pattern with a new value using the 
syntax 'input' -replace ‘pattern’, ‘newvalue'. 


> $text -replace Spattern, Snewvalue 
This is test sample 

text, this is 

a test 


Using [RegEx]::Replace() method 
Replacing matches can also be done using the Replace() method in the [RegEx] .NET class. 


[regex]::Replace(Stext, Spattern, ‘test') 
This is test sample 

text, this is 

a test 


Section 32.3: Replace text with dynamic value using a 
MatchEvalutor 


Sometimes you need to replace a value matching a pattern with a new value that's based on that specific match, 
making it impossible to predict the new value. For these types of scenarios, a MatchEvaluator can be very useful. 


In PowerShell, a MatchEvaluator is as simple as a scriptblock with a single parameter that contains a Match-object 
for the current match. The output of the action will be the new value for that specific match. MatchEvalutor can be 
used with the [Regex] : :Replace() static method. 


Example: Replacing the text inside () with its length 


#Sample text 

Stext = @" 

This is (a) sample 
text, ‘thas: as 

a (sample text) 

"@ 


#Sample pattern: Content wrapped in () 
Spacten = “C2s=\i)e ee) 


SMatchEvalutor = { 
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param(Smatch) 


#Replace content with length of content 
Smatch.Value.Length 


Output: 


> [regex]::Replace(Stext, Spattern, S$MatchEvalutor) 
This is 1 sample 


text, this is 
all 


Example: Make sample upper-case 


#Sample pattern: "Sample" 
Spattern = ‘sample’ 


SMatchEvalutor = { 
param(Smatch) 


#Return match in upper-case 
Smatch.Value.ToUpper() 


Output: 


> [regex]::Replace(Stext, Spattern, S$MatchEvalutor) 
This is (a) SAMPLE 


text, this is 
a (SAMPLE text) 


Section 32.4: Escape special characters 


A regex-pattern uses many special characters to describe a pattern. Ex., . means "any character", + is "one or more" 
etc. 


To use these characters, as a .,+ etc., in a pattern, you need to escape them to remove their special meaning. This is 
done by using the escape character which is a backslash \ in regex. Example: To search for +, you would use the 
pattern \+. 


It can be hard to remember all special characters in regex, so to escape every special character in a string you want 
to search for, you could use the [RegEx] : :Escape( "input" ) method. 


> [regex] ::Escape("(foo)") 
\(foo\) 


> [regex]: :Escape("1+1.2=2.2") 
NCHA ZEON? 


Section 32.5: Multiple matches 


There are multiple ways to find all matches for a pattern in a text. 
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#Sample text 

Stext = @" 

This is (a) sample 
text, this is 

a (sample text) 

"@ 


#Sample pattern: Content wrapped in () 
Spattern = '\(.*?\)' 


Using Select-String 


You can find all matches (global match) by adding the -AllMatches switch to Select String. 


Sm = Select-String -InputObject Stext -Pattern Spattern -AllMatches 
$m | Format-List 


IgnoreCase : True 

LineNumber : 1 

Line : This is (a) sample 
text, this is 
a (sample text) 


Filename : InputStream 

Path : InputStream 

Pattern SONG een) 

Context : 

Matches : {(a), (sample text) } 


#List all matches 


Sm.Matches 
Groups : {(a)} 
Success : True 
Captures : {(a)} 
Index ee 
Length as 
Value : (a) 
Groups : {(sample text) } 
Success : True 
Captures : {(sample text)} 
Index qf 
Length lsh 
Value : (sample text) 


#Get matched text 
Sm.Matches | Select-Object -ExpandProperty Value 


(a) 


(sample text) 
Using [RegEx]::Matches() 


The Matches() method in the .NET *[regex]-class can also be used to do a global search for multiple matches. 


[ regex] : :Matches(Stext, Spattern) 


Groups : {(a)} 
Success : True 
Captures : {(a)} 
Index Bye) 
Length Be) 
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Value : (a) 


Groups : {(sample text) } 
Success : True 

Captures : {(sample text)} 
Index OW 

Length Bhs) 

Value : (sample text) 


> [regex]::Matches(Stext,Spattern) | Select-Object -ExpandProperty Value 


(a) 


(sample text) 
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Chapter 33: Aliases 


Section 33.1: Get-Alias 


To list all aliases and their functions: 
Get-Alias 
To get all aliases for specific cmdlet: 


PS C:\> get-alias -Definition Get-ChildItem 


CommandType Name Version Source 
Alias dir -> Get-ChildItem 
Alias gci -> Get-ChildItem 
Alias ls -> Get-ChildItem 


To find aliases by matching: 


PS C:\> get-alias -Name p* 


CommandType Name Version Source 
Alias popd -> Pop-Location 

Alias proc -> Get-Process 

Alias ps -> Get-Process 

Alias pushd -> Push-Location 

Alias pwd -> Get-Location 


Section 33.2: Set-Alias 


This cmdlet allows you to create new alternate names for exiting cmdlets 


PS C:\> Set-Alias -Name proc -Value Get-Process 


PS C:\> proc 
Handles NPM(K) PM(K) WS(K) VM(M) = CPU(s) Id SI ProcessName 
292 17 13052 20444 ...19 7.94 620 1 ApplicationFrameHost 


Keep in mind that any alias you create will be persisted only in current session. When you start new session you 
need to create your aliases again. Powershell Profiles (see [topic not yet created]) are great for these purposes. 
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Chapter 34: Using the progress bar 


A progress bar can be used to show something is in a process. It is a time-saving and slick feature one should have. 
Progress bars are incredibly useful while debugging to figure out which part of the script is executing, and they’re 
satisfying for the people running scripts to track what’s happening. It is common to display some kind of progress 
when a script takes a long time to complete. When a user launches the script and nothing happens, one begins to 
wonder if the script launched correctly. 


Section 34.1: Simple use of progress bar 


1..108 | ForEach-Object { 

Write-Progress -Activity "Copying files" -Status "$_ %" -Id 1 -PercentComplete S_ - 
CurrentOperation "Copying file file_name_$_.txt" 

Start-Sleep -Milliseconds 500 # sleep simulates working code, replace this line with 
your executive code (i.e. file copying) 


} 


Please note that for brevity this example does not contain any executive code (simulated with Start-Sleep). However it is 
possible to run it directly as is and then modify and play with it. 


This is how result looks in PS console: 


> Windows PowerShell 


Windows PowerShell 
opyright (C) 2015 Microsoft Corporation. All rights reserved. 


File Edit View Tools Debug Add-ons Help 


Hebh¢« & OaA|9 |? SH @|a|So th om. 
] 
Copying files. “|| Untitledi.ps1* X | : 
8 %, Copying file file_name_S.txt. 1 1..100 | foreach-object { 


2 Write-Progress -Activity "Copying 


eee eee 
Section 34.2: Usage of inner progress bar 


1..18 | foreach-object { 

SfileName = "file_name_S_.txt" 

Write-Progress -Activity "Copying files" -Status "$($_*1@) %" -Id 1 -PercentComplete 
(S_*10) -CurrentOperation "Copying file S$fileName" 


1..108 | foreach-object { 
Write-Progress -Activity "Copying contents of the file S$fileName" -Status "$_ %" -Id 2 
-ParentId 1 -PercentComplete S_ -CurrentOperation "Copying $_. line" 


Start-Sleep -Milliseconds 2@ # sleep simulates working code, replace this line with 
your executive code (i.e. file copying) 


} 


Start-Sleep -Milliseconds 500 # sleep simulates working code, replace this line with your 
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executive code (i.e. file search) 


Please note that for brevity this example does not contain any executive code (simulated with Start-Sleep). However it is 
possible to run it directly as is and then modify and play with it. 


This is how result looks in PS console: 


> Windows PowerShell 


Vindows PowerShell 
opyright (Cc) 2015 Microsoft Corporation. All rights reserved. 


This is how result looks in PS ISE: 


File Edit View Tools Debug Add-ons Help 
HEeb*¢e2ara/9 | GBEl|@lBal\aeOo|ma. 


Copying files. 2 Untitled1.ps1* 
10 %, Copying file file_name_1.txt. 1 Hi1..10 | foreach-object { 


2 $fileName = "file_name_S$_.txt” 
Ey 3 Write-Progress -Activity "Copying files” -Sti 
Copying contents of the file file_name_1.txt, 5 r= 1..100 foreach-object { 
83 %, Copying 83. line, 6 Write-Progress -Activity "Copying conten 
————————— ESS 3 wis eae rds 
9 
Start-Sleep -Milliseconds 500 10 Start-Sleep -Milliseconds 500 
11 
12 | 
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Chapter 35: PowerShell.exe Command-Line 


Parameter Description 
-Help | -? | /? Shows the help 


Path to script-file that should be executed and arguments 


-File <FilePath> [<Args>] (optional) 
-Command { - | <script-block> [-args <arg- 


array>] | <string> [<CommandParameters>] } Commands to be executed followed by arguments 


-EncodedCommand 


2BaseG4encadedCommands Base64 encoded commands 
-ExecutionPolicy <ExecutionPolicy> Sets the execution policy for this process only 


Sets input format for data sent to process. Text (strings) or XML 
(serialized CLIXML) 


PowerShell 3.0+: Runs PowerShell in multi-threaded apartment 


-InputFormat { Text | XML} 


oa (STA is default) 

Sta PowerShell 2.0: Runs PowerShell in a single-threaded apartment 
(MTA is default) 

: Leaves PowerShell console running after executing the 

-NoExit : 
script/command 

-NoLogo Hides copyright-banner at launch 

-NonInteractive Hides console from user 

-NoProfile Avoid loading of PowerShell profiles for machine or user 


Sets output format for data returned from PowerShell. Text 
(strings) or XML (serialized CLIXML) 


Loads a pre-created console file that configures the environment 
(created using Export-Console) 


-OutputFormat { Text | XML } 


-PSConsoleFile <FilePath> 


-Version <Windows PowerShell version> Specify a version of PowerShell to run. Mostly used with 2.8 


Specifies whether to start the PowerShell process as a normal, 


Wi < > 
Windowstyle style hidden, minimized or maximized window. 


Section 35.1: Executing a command 
The -Command parameter is used to specify commands to be executed on launch. It supports multiple data inputs. 
-Command <string> 


You can specify commands to executed on launch as a string. Multiple semicolon ;-separated statements may be 
executed. 


>PowerShell.exe -Command "(Get-Date) .ToShortDateString()" 
10.09.2016 


>PowerShell.exe -Command "(Get-Date).ToShortDateString(); ‘PowerShell is fun!'" 
10.09.2016 
PowerShell is fun! 


-Command { scriptblock } 


The -Command parameter also supports a scriptblock input (one or multiple statements wrapped in braces { #code 
}. This only works when calling PowerShe11.exe from another Windows PowerShell-session. 


PS > powershell.exe -Command { 
"This can be useful, sometimes..." 
(Get-Date) . ToShortDateString() 
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} 


This can be useful, sometimes... 
10.09.2016 


-Command - (standard input) 


You can pass in commands from the standard input by using -Command -. The standard input can come from echo, 
reading a file, a legacy console application etc. 


>echo "Hello World";"Greetings from PowerShell" | PowerShell.exe -NoProfile -Command 
Hello World 
Greetings from PowerShell 


Section 35.2: Executing a script file 

You can specify a file to a ps1-script to execute its content on launch using the -File parameter. 
Basic script 

MyScript.ps1 


(Get-Date) . ToShortDateString() 
"Hello World" 


Output: 


>PowerShell.exe -File Desktop\MyScript.ps1 
10.09.2016 
Hello World 


Using parameters and arguments 


You can add parameters and/or arguments after filepath to use them in the script. Arguments will be used as 
values for undefined/available script-parameters, the rest will be available in the Sargs-array 


MyScript.ps1 
param(SName) 


"Hello $Name! Today's date it $((Get-Date) .ToShortDateString())" 
"First arg: $(Sargs[@])" 


Output: 


-PowerShell.exe -File Desktop\MyScript.ps1 -Name StackOverflow foo 
Hello StackOverflow! Today's date it 10.09.2016 
First arg: foo 
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Chapter 36: Cmdlet Naming 


CmdLets should be named using a <verb>-<noun> naming scheme in order to improve discoverability. 


Section 36.1: Verbs 


Verbs used to name CmdLets should be named from verbs from the list supplied be Get-Verb 


Further details on how to use verbs can be found at Approved Verbs for Windows PowerShell 


Section 36.2: Nouns 


Nouns should always be singular. 


Be consistent with the nouns. For instance Find-Package needs a provider the noun is PackageProvider not 
ProviderPackage. 
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Chapter 37: Running Executables 
Section 37.1: GUI Applications 


PS> gui_app.exe (1) 

PS> & gui_app.exe (2) 

PS> & gui_app.exe | Out-Null (3) 

PS> Start-Process gui_app.exe (4) 

PS> Start-Process gui_app.exe -Wait (5) 


GUI applications launch in a different process, and will immediately return control to the PowerShell host. 
Sometimes you need the application to finish processing before the next PowerShell statement must be executed. 
This can be achieved by piping the application output to $null (3) or by using Start-Process with the -Wait switch (5). 


Section 37.2: Console Streams 


PS> SErrorActionPreference "Continue" (1) 


PS> & console_app.exe *>&1 | % { S_ } (2) 

PS> & console_app.exe *>&1 | ? { $_ -is [System.Management.Automation.ErrorRecord] } (3) 
PS> & console_app.exe *>&1 | ? { $_ -is [System.Management.Automation.WarningRecord] } (4) 
PS> & console_app.exe *>&1 | ? { $_ -is [System.Management.Automation.VerboseRecord] } (5) 
PS> & console_app.exe *>&1 (6) 

PS> & console_app.exe 2>&1 (7) 


Stream 2 contains System.Management.Automation.ErrorRecord objects. Note that some applications like git.exe 
use the "error stream" for informational purposes, that are not necessarily errors at all. In this case it is best to look 
at the exit code to determine whether the error stream should be interpreted as errors. 


PowerShell understands these streams: Output, Error, Warning, Verbose, Debug, Progress. Native applications 
commonly use only these streams: Output, Error, Warning. 


In PowerShell 5, all streams can be redirected to the standard output/success stream (6). 


In earlier PowerShell versions, only specific streams can be redirected to the standard output/success stream (7). In 
this example, the "error stream" will be redirected to the output stream. 


Section 37.3: Exit Codes 


PS> SLastExitCode 
PS> $? 
PS> SError[@] 


These are built-in PowerShell variables that provide additional information about the most recent error. 


SLastExitCode is the final exit code of the last native application that was executed. $? and SError[9] is the last 
error record that was generated by PowerShell. 
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Chapter 38: Enforcing script prerequisites 


Section 38.1: Enforce minimum version of PowerShell host 


#requires -version 4 


After trying to run this script in lower version, you will see this error message 


Ascript.ps1 : The script 'script.ps1' cannot be run because it contained a '"#requires" statement at line 1 
for Windows PowerShell version 5.0. The version required by the script does not match the currently 
running version of Windows PowerShell version 2.0. 


Section 38.2: Enforce running the script as administrator 


Version = 4.0 


#requires -RunAsAdministrator 


After trying to run this script without admin privileges, you will see this error message 


Ascript.ps1 : The script 'script.ps1' cannot be run because it contains a "#requires" statement for running 
as Administrator. The current Windows PowerShell session is not running as Administrator. Start 
Windows PowerShell by using the Run as Administrator option, and then try running the script again. 
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Chapter 39: Using the Help System 
Section 39.1: Updating the Help System 


Version > 3.0 


Beginning with PowerShell 3.0, you can download and update the offline help documentation using a single cmdlet. 
Update-Help 

To update help on multiple computers (or computers not connected to the internet). 

Run the following on a computer with the help files 

Save-Help -DestinationPath \\Server@1\Share\PSHelp -Credential SCred 

To run on many computers remotely 


Invoke-Command -ComputerName (Get-Content Servers.txt) -ScriptBlock {Update-Help -SourcePath 
\\Server@1\Share\Help -Credential Scred} 


Section 39.2: Using Get-Help 
Get-Help can be used to view help in PowerShell. You can search for cmdlets, functions, providers or other topics. 


In order to view the help documentation about jobs, use: 
Get-Help about_Jobs 


You can search for topics using wildcards. If you want to list available help topics with a title starting with about_, 
try: 


Get-Help about_* 

If you wanted help on Select Object, you would use: 

Get-Help Select-Object 

You can also use the aliases help or man. 

Section 39.3: Viewing online version of a help topic 
You can access online help documentation using: 


Get-Help Get-Command -Online 


Section 39.4: Viewing Examples 
Show usage examples for a specific cmdlet. 


Get-Help Get-Command -Examples 
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Section 39.5: Viewing the Full Help Page 
View the full documentation for the topic. 


Get-Help Get-Command -Full 


Section 39.6: Viewing help for a specific parameter 
You can view help for a specific parameter using: 


Get-Help Get-Content -Parameter Path 
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Chapter 40: Modules, Scripts and 
Functions 


PowerShell modules bring extendibility to the systems administrator, DBA, and developer. Whether it’s simply as a 
method to share functions and scripts. 


PowerShell Functions are to avoid repetitive codes. Refer [PS Functions][1] [1]: PowerShell Functions 


PowerShell Scripts are used for automating administrative tasks which consists of command-line shell and 
associated cmdlets built on top of NET Framework. 


Section 40.1: Function 


A function is a named block of code which is used to define reusable code that should be easy to use. It is usually 
included inside a script to help reuse code (to avoid duplicate code) or distributed as part of a module to make it 
useful for others in multiple scripts. 


Scenarios where a function might be useful: 


e Calculate the average of a group of numbers 
e Generate a report for running processes 
e Write a function that tests is a computer is "healthy" by pinging the computer and accessing the c$-share 


Functions are created using the function keyword, followed by a single-word name and a script block containing 
the code to executed when the function name is called. 


function NameOfFunction { 
Your code 


} 


Demo 


function HelloWorld { 
Write-Host "Greetings from PowerShell!" 


} 
Usage: 


> HelloWorld 
Greetings from PowerShel1! 


Section 40.2: Script 


A script is a text file with the file extension .ps1 that contains PowerShell commands that will be executed when the 
script is called. Because scripts are saved files, they are easy to transfer between computers. 


Scripts are often written to solve a specific problem, ex.: 


e Run a weekly maintenance task 
¢ To install and configure a solution/application on a computer 


Demo 
MyFirstScript.ps1: 
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Write-Host "Hello World!" 
2+2 


You can run a script by entering the path to the file using an: 


e Absolute path, ex. c:\MyFirstScript.ps1 
e Relative path, ex .\MyFirstScript.ps1 if the current directory of your PowerShell console was C:\ 


Usage: 


.\MyFirstScript.ps1 
Hello World 
4 


A script can also import modules, define its own functions etc. 
MySecondScript.ps1: 


function HelloWorld { 
Write-Host "Greetings from PowerShell!" 


} 


HelloWorld 

Write-Host "Let's get started!" 
24+2 

HelloWorld 


Usage: 


> .\MySecondScript.psl 
Greetings from PowerShell! 
Let's get started! 

4 

Greetings from PowerShell! 


Section 40.3: Module 


A module is a collection of related reusable functions (or cmdlets) that can easily be distributed to other PowerShell 
users and used in multiple scripts or directly in the console. A module is usually saved in its own directory and 
consists of: 


e One or more code files with the .psm1 file extension containing functions or binary assemblies (.d11) 
containing cmdlets 

¢ Amodule manifest .psd1 describing the modules name, version, author, description, which 
functions/cmdlets it provides etc. 

e Other requirements for it to work incl. dependencies, scripts etc. 


Examples of modules: 


¢ A module containing functions/cmdlets that perform statistics on a dataset 
e A module for querying and configuring databases 


To make it easy for PowerShell to find and import a module, it is often placed in one of the known PowerShell 
module-locations defined in Senv :PSModulePath. 
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Demo 


List modules that are installed to one of the known module-locations: 

Get-Module -ListAvailable 

Import a module, ex. Hyper-V module: 

Import-Module Hyper-V 

List available commands in a module, ex. the Microsoft .PowerShell.Archive-module 


> Import-Module Microsoft.PowerShell.Archive 
> Get-Command -Module Microsoft .PowerShell.Archive 


CommandType Name Version Source 
Function Compress-Archive 1.0.1.0 Microsoft.PowerShell.Archive 
Function Expand-Archive 1.0.1.0 Microsoft.PowerShell.Archive 


Section 40.4: Advanced Functions 


Advanced functions behave the in the same way as cmdlets. The PowerShell ISE includes two skeletons of advanced 
functions. Access these via the menu, edit, code snippets, or by Ctrl+J. (As of PS 3.0, later versions may differ) 


Key things that advanced functions include are, 


¢ built-in, customized help for the function, accessible via Get-Help 
e can use [CmdletBinding()] which makes the function act like a cmdlet 
e extensive parameter options 


Simple version: 


<# 
. Synopsis 
Short description 
. DESCRIPTION 
Long description 
. EXAMPLE 
Example of how to use this cmdlet 
. EXAMPLE 
Another example of how to use this cmdlet 
#> 
function Verb-Noun 
{ 
[CmdletBinding()] 
[OutputType([int])] 
Param 
( 
# Param1 help description 
[Parameter (Mandatory=Strue, 
ValueFromPipelineByPropertyName=Strue, 
Position=@) ] 
$Param1, 


# Param2 help description 


[int] 
SParam2 
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) 


Begin 
{ 
} 


Process 


Complete version: 


<# 
. Synopsis 
Short description 
. DESCRIPTION 
Long description 
. EXAMPLE 
Example of how to use this cmdlet 
. EXAMPLE 
Another example of how to use this cmdlet 
. INPUTS 
Inputs to this cmdlet (if any) 
. OUTPUTS 
Output from this cmdlet (if any) 
.NOTES 
General notes 
. COMPONENT 
The component this cmdlet belongs to 
.ROLE 
The role this cmdlet belongs to 
. FUNCTIONALITY 
The functionality that best describes this cmdlet 
#> 
function Verb-Noun 
{ 

[ CmdletBinding(DefaultParameterSetName='Parameter Set 1', 
SupportsShouldProcess=Strue, 
PositionalBinding=Sfalse, 
HelpUri = 'http://www.microsoft.com/' , 
ConfirmImpact=' Medium’ ) ] 

[OutputType([String])] 

Param 

( 


# Param1 help description 

[Parameter (Mandatory=Strue, 
ValueFromPipeline=Strue, 
ValueFromPipelineByPropertyName=Strue, 
ValueFromRemainingArguments=Sfalse, 
Position=0, 
ParameterSetName='Parameter Set 1')] 

[ValidateNotNul11()] 

[ValidateNotNullOrEmpty() ] 

[ ValidateCount(9, 5) ] 

[ValidateSet("sun", "moon", "“earth")] 

[Alias("p1")] 

SParam1, 
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# Param2 help description 
[Parameter(ParameterSetName='Parameter Set 1')] 
[ AllowNul11()] 

[AllowEmptyCollection() ] 

[AllowEmptyString()] 

[ValidateScript({Strue})] 

[ValidateRange(@, 5) ] 

[int] 

$Param2 , 


# Param3 help description 
[Parameter(ParameterSetName='Another Parameter Set')] 
[ValidatePattern("[a-z]*")] 

[ValidateLength(@,15) ] 


[String] 
$Param3 
) 
Begin 
{ 
} 
Process 
if (Spscmdlet.ShouldProcess("Target", "Operation")) 
{ 
} 
Ip 
End 
{ 
} 


Goalkicker.com - PowerShell® Notes for Professionals 


m 


Chapter 41: Naming Conventions 


Section 41.1: Functions 


Get-User() 


e Use Verb-Noun pattern while naming a function. 
e Verb implies an action e.g. Get, Set, New, Read, Write and many more. See approved verbs. 


e Noun should be singular even if it acts on multiple items. Get-User() may return one or multiple users. 


e Use Pascal case for both Verb and Noun. E.g. Get-UserLogin() 
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Chapter 42: Common parameters 


Section 42.1: ErrorAction parameter 


Possible values are Continue | Ignore | Inquire | SilentlyContinue | Stop | Suspend 


Value of this parameter will determine how the cmdlet will handle non-terminating errors (those generated from 
Write-Error for example; to learn more about error handling see [topic not yet created’). 


Default value (if this parameter is omitted) is Continue. 
-ErrorAction Continue 
This option will produce an error message and will continue with execution. 
PS C:\> Write-Error "test" -ErrorAction Continue ; Write-Host "Second command" 


Continue 


Second command 


-ErrorAction Ignore 


This option will not produce any error message and will continue with execution. Also no errors will be added to 
SError automatic variable. 
This option was introduced in v3. 


PS C:\> Write-Error "test" -ErrorAction Ignore ; Write-Host "Second command" 


PS C:\> write 


: je Ignore ; 
Second command 


-ErrorAction Inquire 
This option will produce an error message and will prompt user to choose an action to take. 


PS C:\> Write-Error "test" -ErrorAction Inquire ; Write-Host "Second command" 


Inquire ; 


[A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "y"): 


-ErrorAction SilentlyContinue 


This option will not produce an error message and will continue with execution. All errors will be added to SError 
automatic variable. 


PS C:\> Write-Error "test" -ErrorAction SilentlyContinue ; Write-Host "Second command" 


SilentlyContinue ; 


Second command 


-ErrorAction Stop 
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This option will produce an error message and will not continue with execution. 


PS C:\> Write-Error "test" -ErrorAction Stop ; Write-Host "Second command" 


-ErrorAction Suspend 


Only available in Powershell Workflows. When used, if the command runs into an error, the workflow is suspended. 
This allows investigation of such error and gives a possibility to resume the workflow. To learn more about 
Workflow system, see [topic not yet created]. 
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Chapter 43: Parameter sets 


Parameter sets are used to limit the possible combination of parameters, or to enforce the use of parameters 
when 1 or more parameters are selected. 


The examples will explain the use and reason of a parameter set. 


Section 43.1: Parameter set to enforce the use of a 
parameter when a other is selected 


When you want for example enforce the use of the parameter Password if the parameter User is provided. (and 
vice versa) 


Function Do-Something 


{ 
Param 
( 
[Parameter (Mandatory=Strue) ] 
[String]SSomeThingToDo, 
[Parameter (ParameterSetName="Credentials", mandatory=Sfalse) ] 
[String]SComputername = "LocalHost", 
[Parameter(ParameterSetName="Credentials", mandatory=Strue) ] 
[String]SUser, 
[Parameter(ParameterSetName="Credentials", mandatory=Strue) ] 
[SecureString]SPassword 
) 
#Do something 
} 


# This will not work he will ask for user and password 
Do-Something -SomeThingToDo 'get-help about_Functions_Advanced' -ComputerName 


# This will not work he will ask for password 
Do-Something -SomeThingToDo 'get-help about_Functions_Advanced' -User 


Section 43.2: Parameter set to limit the combination of 
parameters 


Function Do-Something 


{ 
Param 
( 
[Parameter (Mandatory=Strue) ] 
[String]SSomeThingToDo, 
[Parameter(ParameterSetName="Silently", mandatory=Sfalse) ] 
[Switch]$Silently, 
[Parameter(ParameterSetName="Loudly", mandatory=Sfalse) ] 
[ Switch]SLoudly 
) 
#Do something 
} 


# This will not work because you can not use the combination Silently and Loudly 
Do-Something -SomeThingToDo 'get-help about_Functions_Advanced' -Silently -Loudly 
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Chapter 44: PowerShell Dynamic 
Parameters 


Section 44.1: "Simple” dynamic parameter 


This example adds a new parameter to MyTestFunction if SSomeUsefulNumber is greater than 5. 


function MyTestFunction 


{ 
[ CmdletBinding(DefaultParameterSetName='DefaultConfiguration’ )] 


Param 


( 
) 


[ Parameter (Mandatory=Strue) ] [int ]S$SomeUsefulNumber 


DynamicParam 
{ 
SparamDictionary = New-Object -Type 
System.Management .Automation.RuntimeDefinedParameterDictionary 
Sattributes = New-Object System.Management.Automation.ParameterAttribute 
Sattributes.ParameterSetName = "__AllParameterSets" 
Sattributes.Mandatory = Strue 
SattributeCollection = New-Object -Type 
System.Collections.ObjectModel.Collection[System. Attribute] 
SattributeCollection.Add(Sattributes) 
# If "SomeUsefulNumber" is greater than 5, then add the "MandatoryParam1" parameter 
if(SSomeUsefulNumber -gt 5) 
{ 
# Create a mandatory string parameter called "MandatoryParam1" 
SdynParam1 = New-Object -Type 
System.Management .Automation.RuntimeDefinedParameter("MandatoryParam1", [String], 
SattributeCollection) 
# Add the new parameter to the dictionary 
SparamDictionary.Add("MandatoryParam1", SdynParam1) 


} 
return SparamDictionary 
} 
process 
{ 
Write-Host "SomeUsefulNumber = SSomeUsefulNumber" 
# Notice that dynamic parameters need a specific syntax 
Write-Host ("MandatoryParam1 = {@}" -f SPSBoundParameters.MandatoryParam] ) 
} 
} 
Usage: 


PS > MyTestFunction -SomeUsefulNumber 3 
SomeUsefulNumber = 3 
MandatoryParam1 = 


PS > MyTestFunction -SomeUsefulNumber 6 

cmdlet MyTestFunction at command pipeline position 1 
Supply values for the following parameters: 
MandatoryParam1 : 
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PS >MyTestFunction -SomeUsefulNumber 6 -MandatoryParam1 test 
SomeUsefulNumber = 6 
MandatoryParam1 = test 


In the second usage example, you can clearly see that a parameter is missing. 


Dynamic parameters are also taken into account with auto completion. 
Here's what happens if you hit ctrl + space at the end of the line: 


PS >MyTestFunction -SomeUsefulNumber 3 ctrl+space 


Verbose WarningAction WarningVariable 
Debug InformationAction InformationVariable 
ErrorAction ErrorVariable OutVariable 


PS >MyTestFunction -SomeUsefulNumber 6 -<ctrl+space 


MandatoryParam1 ErrorAction ErrorVariable 
Verbose WarningAction WarningVariable 
Debug InformationAction InformationVariable 
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OutBuf fer 
PipelineVariable 


OutVariable 
OutBuffer 
PipelineVariable 


MZ 


Chapter 45: GUI in PowerShell 
Section 45.1: WPF GUI for Get-Service cmdlet 


Add-Type -AssemblyName PresentationFramework 


[xm1]SXAMLWindow = ' 
<Window 
xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation" 
xmlns :x="http://schemas .microsoft .com/winfx/2006/xam1" 
Height="Auto" 
SizeToContent="WidthAndHeight" 
Title="Get-Service"> 
<ScrollViewer Padding="10,10,10,0" ScrollViewer .VerticalScrollBarVisibility="Disabled"> 
<StackPanel> 
<StackPanel Orientation="Horizontal"> 
<Label Margin="10,10,0,10">ComputerName :</Label> 
<TextBox Name="Input" Margin="10" Width="25@px"></TextBox> 
</StackPanel> 
<DockPanel> 
<Button Name="ButtonGetService" Content="Get-Service" Margin="10" Width="15@px" 
IsEnabled="false" /> 
<Button Name="ButtonClose" Content="Close" HorizontalAlignment="Right" Margin="10" 
Width="5@px"/> 
</DockPanel> 
</StackPanel> 
</ScrollViewer > 
</Window> 


# Create the Window Object 
SReader=(New-Object System.Xm1.XmlNodeReader SXAMLWindow) 
$Window=[Windows.Markup.XamlReader]::Load( SReader ) 


# TextChanged Event Handler for Input 

$TextboxInput = SWindow.FindName("Input") 

STextboxInput .add_TextChanged.Invoke( { 
SComputerName = S$TextboxInput.Text 
$ButtonGetService.IsEnabled = SComputerName -ne 


}) 


# Click Event Handler for ButtonClose 

SButtonClose = SWindow.FindName("ButtonClose" ) 

SButtonClose.add_Click. Invoke( { 
S$Window.Close(); 


}) 


# Click Event Handler for ButtonGetService 
SButtonGetService = SWindow.FindName("ButtonGetService" ) 
SButtonGetService.add_Click . Invoke( { 

SComputerName = STextboxInput.text.Trim() 

try{ 

Get-Service -ComputerName ScomputerName | Out-GridView -Title "Get-Service on 

$ComputerName" 

}catch{ 


[System.Windows .MessageBox] ::Show($_.exception.message, "Error", [System.Windows.MessageBoxButton] : :0 
K, [System.Windows .MessageBoxImage]: :Error) 

} 
}) 
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# Open the Window 
SWindow.ShowDialog() | Out-Null 


This creates a dialog window which allows the user to select a computer name, then will display a table of services 


and their statuses on that computer. 
This example uses WPF rather than Windows Forms. 
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Chapter 46: URL Encode/Decode 


Section 46.1: Encode Query String with 
[System.Web.HttpUtility]: “Urlencoded’ 


Sscheme = ‘https' 


Surl_format = '{0}://example.vertigion.com/foos?{1}' 
Sqs_data = @{ 

‘fool'='bar1' 

'foo2'= 'complex;/?:@&=+$, bar''"'; 

‘complex; /?:@&=+$, foo''"'='bar2'; 
} 


[System.Collections.ArrayList] Sqs_array = @() 

foreach (Sqs in Sqs_data.GetEnumerator()) { 
Sqs_key = [System.Web .HttpUtility] : :UrlEncode(Sqs.Name) 
Sqs_value = [System.Web.HttpUtility] : :UrlEncode(S$qs.Value) 
Sqs_array.Add("S{qs_key}=${qs_value}") | Out-Null 

} 


Surl = Surl_format -f @([uri]::"UriScheme${scheme}", (Sqs_array -join '&')) 


With [System.Web.HttpUtility] : :UrlEncode(), you will notice that spaces are turned into plus signs (+) instead of 
%20: 


https://example.vertigion.com/foos? 
foo2=complex%3b%2f%3f%3a%40%26%3d%2b%24%2c+bar%27%22& 


complex%3b%2F%3f%3a%40%26%3d%2b%24%2c+f00%27%22=bar2&foo1=bar1 


Section 46.2: Quick Start: Encoding 


Surl1 = [uri]::EscapeDataString("http://test.com?test=my value") 
# urll: http%3A%2F%2Ftest .com%3Ftest%3Dmy%20value 


Surl2 = [uri]::EscapeUriString("http://test.com?test=my value") 
# url2: http://test.com?test=my%20value 


# HttpUtility requires at least .NET 1.1 to be installed. 
Surl13 = [System.Web.HttpUtility] ::UrlEncode("http://test.com?test=my value") 
# url3: http%3a%2f%2Fftest .com%3ftest%3dmy+value 


Note: More info on HTTPUtility. 


Section 46.3: Quick Start: Decoding 


Note: these examples use the variables created in the Quick Start: Encoding section above. 


# urll: http%3A%2F%2Ftest .com%3Ftest%3Dmy%20value 
[uri] ::UnescapeDataString(Surl11) 
# Returns: http://test.com?test=my value 


# url2: http://test.com?test=my%20value 


[uri] ::UnescapeDataString(Sur12) 
# Returns: http://test.com?test=my value 
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# url3: http%3a%2f%2Fftest .com%3ftest%3dmy+value 
[uri] ::UnescapeDataString(Sur13) 
# Returns: http://test.com?test=my+value 


# Note: There is no “[uri]::UnescapeUriString()°; 
# which makes sense since the ~ [uri] ::UnescapeDataString()~° 
# function handles everything it would handle plus more. 


# HttpUtility requires at least .NET 1.1 to be installed. 
# urll: http%3A%2F%2Ftest .com%3Ftest%3Dmy%20value 
[System.Web .HttpUtility] : :UrlDecode(Surl11) 

# Returns: http://test.com?test=my value 


# HttpUtility requires at least .NET 1.1 to be installed. 
# url2: http://test.com?test=my%20value 

[System.Web .HttpUtility] : :UrlDecode(Surl12) 

# Returns: http://test.com?test=my value 


# HttpUtility requires at least .NET 1.1 to be installed. 
# url3: http%3a%2f%2Fftest .com%3ftest%3dmy+value 
[System.Web .HttpUtility] : :UrlDecode(Sur13) 

# Returns: http://test.com?test=my value 


Note: More info on HTTPUtility. 


Section 46.4: Encode Query String with 
[uri]::EscapeDataStringQO 


Sscheme = ‘https' 


Surl_format = '{@}://example.vertigion.com/foos?{1}' 
Sqs_data = @{ 

sHOOl@= "ball: + 

'foo2'= 'complex;/?:@&=+$, bar''"'; 

‘complex; /?:@&=+$, foo''"'='bar2'; 
} 


[System.Collections.ArrayList] Sqs_array = @() 
foreach (Sqs in Sqs_data.GetEnumerator()) { 
Sqs_key = [uri]: :EscapeDataString(Sqs.Name) 
Sqs_value = [uri]::EscapeDataString(Sqs.Value) 
Sqs_array.Add("S{qs_key}=${qs_value}") | Out-Null 
} 


Surl = Surl_format -f @([uri]::"UriScheme${scheme}", (Sqs_array -join '&')) 


With [uri]: :EscapeDataString(), you will notice that the apostrophe (') was not encoded: 


https://example.vertigion.com/foos? 
foo2=complex%3B%2F%3F%3A%40%26%3D%2B%24%2C%20bar'%22& 
complex%3B%2F%3F%3A%40%26%3D%2B%24%2C%20f00'%22=bar2&foo1 =bar1 


Section 46.5: Decode URL with [uri]::UnescapeDataStringQ 


Encoded with [uri] ::EscapeDataString() 


First, we'll decode the URL and Query String encoded with [uri] : :EscapeDataString() in the above example: 
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https://example.vertigion.com/foos? 
foo2=complex%3B%2F%3F%3A%40%26%3D%2B%24%2C%20bar'%22& 
complex%3B%2F%3F%3A%40%26%3D%2B%24%2C%20f00'%22=bar2&foo1=bar1 


Supll= 

‘https: //example.vertigion.com/foos?foo2=complex%3B%2F%3F%3A%40%26%3D%2B%24%2C%2O0bar' '%22&complex%3 
B%2F%3F%3A%4O%26%3D%2B%24%2C%20fF00' '%22=bar2&fool=bar1' 

Surl_parts_regex = '*(([*%:/?#]+):)?(//( [4/24] *) )?( [424] *) (\?([4#] *) )?(#(.*))?' # See Remarks 


if (Surl -match Surl_parts_regex) { 

Surl_parts = @{ 
'Scheme' = SMatches[2]; 
‘Server’ = SMatches[4]; 
'Path' = SMatches[5]; 
'QueryString' = SMatches[7]; 
‘QueryStringParts' = @{} 

} 


foreach (Sqs in Squery_string.Split('&')) { 
Sqs_key, Sqs_value = $qs.Split('=') 
Surl_parts.QueryStringParts . Add ( 
[uri] ::UnescapeDataString(Sqs_key), 
[uri] : :UnescapeDataString(Sqs_value) 
) | Out-Null 
} 
} else { 
Throw [System.Management.Automation.ParameterBindingException] "Invalid URL Supplied" 


} 
This gives you back [hashtable]Surl_parts; which equals (Note: the spaces in the complex parts are spaces): 


PS > Surl_parts 


Name Value 

Scheme https 

Path /foos 

Server example.vertigion.com 
QueryString 


foo2=complex%3B%2F%3F%3A%40%26%3D%2B%24%2C%2Obar '%22&complex%3 B%2F%3 F%3A%4O%26%3D%2B%24%2C%2 OF 00 ' % 
22=bar2&foo1=bar1 
QueryStringParts {foo2, complex;/?:@&=+$, foo'", fool} 


PS > Surl_parts.QueryStringParts 


Name Value 

foo2 complex; /?:@&=+S$, bar'" 
complex;/?:@&=+$, foo'" bar2 

fool bar1 


Encoded with [System.Web .HttpUtility]: :UrlEncode() 
Now, we'll decode the URL and Query String encoded with [System.Web .HttpUtility] : :UrlEncode() in the above 


example: 


https://example.vertigion.com/foos? 
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foo2=complex%3b%2f%3f%3a%40%26%3d%2b%24%2c+bar%27"%22& 
complex%3b%2F%3f%3a%40%26%3d%2b%24%2c+f00%27%22=bar2&foo1=bar1 


Sunil 
‘https://example.vertigion.com/foos?foo2=complex%3b%2 F%3 F%3 a%4O%26%3d%2 b%24%2c+bar%27%22&comp lex%3b 
%2 $%3 F%3._A%4O%26%3 d%2b%24%2C4+F00%27%22=bar2&fool=bar1 ' 

Surl_parts_regex = '4(([4:/?#]+):)?(//( [4/24] *) )?( [424] *) (\2?( [44] *) )?(#(.*))?' # See Remarks 


if (Surl -match Surl_parts_regex) { 

Surl_parts = @{ 
'Scheme' = SMatches[2]; 
‘Server’ = SMatches[4]; 
‘'Path' = SMatches[5]; 
‘QueryString' = SMatches[7]; 
"QueryStringParts' = @{} 

} 


foreach (Sqs in Squery_string.Split('&')) { 
Sqs_key, Sqs_value = $qs.Split('=') 
Surl_parts.QueryStringParts . Add ( 
[uri] ::UnescapeDataString(Sqs_key), 
[uri] : :UnescapeDataString(Sqs_value) 
) | Out-Null 
} 
} else { 
Throw [System.Management.Automation.ParameterBindingException] "Invalid URL Supplied" 


} 


This gives you back [hashtable]Surl_parts, which equals (Note: the spaces in the complex parts are plus signs (+) 
in the first part and spaces in the second part): 


S > Surl_parts 


Name Value 

Scheme https 

Path /foos 

Server example.vertigion.com 
QueryString 


foo2=complex%3b%2F%3 F%3a%4O%26%3.d%2b%24%2c+bar%27%22 &complex%3b%2 Ff %3 F%3.a%4O%26%3d%2b%24%2C+F00%27% 
22=bar2&foo1=bar1 
QueryStringParts {foo2, complex;/?:@&=+$, foo'", fool} 


PS > Surl_parts.QueryStringParts 


Name Value 

foo2 complex; /?:@&=+S$, bar'" 
complex; /?:@&=+$, foo'" bar2 

fool bar1 


Section 46.6: Decode URL with 
‘[System.Web.HttpUtility]::UrlDecodeQ’ 


Encoded with [uri]: :EscapeDataString() 


First, we'll decode the URL and Query String encoded with [uri] : :EscapeDataString() in the above example: 
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https://example.vertigion.com/foos? 
foo2=complex%3B%2F%3F%3A%40%26%3D%2B%24%2C%20bar'%22& 
complex%3B%2F%3F%3A%40%26%3D%2B%24%2C%20fo00'%22=bar2&foo1=bar1 


Supie= 

‘https: //example.vertigion.com/foos?foo2=complex%3B%2F%3F%3A%40%26%3D%2B%24%2C%2O0bar' '%22&complex%3 
B%2F%3F%3A%4O%26%3D%2B%24%2C%2OF00' '%22=bar2&foo1=bar1 ' 

Surl_parts_regex = '4(([4:/?#]+):)?(//( [4/24] *) )?( [424] *) (\2?( [44] *) )?(#(.*))?' # See Remarks 


if (Surl -match Surl_parts_regex) { 

Surl_parts = @{ 
‘Scheme’ = SMatches[2]; 
‘Server’ = SMatches[4]; 
'Path' = SMatches[5]; 
'QueryString' = SMatches[7]; 
‘QueryStringParts' = @{} 

} 


foreach (Sqs in Squery_string.Split('&')) { 
Sqs_key, $qs_value = S$qs.Split('=') 
Surl_parts.QueryStringParts . Add ( 
[System.Web .HttpUtility] : :UrlDecode(Sqs_key), 
[System.Web.HttpUtility] : :UrlDecode(S$qs_value) 
) | Out-Null 
} 
} else { 
Throw [System.Management.Automation.ParameterBindingException] "Invalid URL Supplied" 


} 
This gives you back [hashtable]Surl_parts; which equals (Note: the spaces in the complex parts are spaces): 


PS > Surl_parts 


Name Value 

Scheme https 

Path /foos 

Server example.vertigion.com 
QueryString 


foo2=complex%3B%2F%3F%3A%40%26%3D%2B%24%2C%2Obar '%22&complex%3 B%2F%3 F%3A%4O%26%3D%2B%24%2C%2 OF 00 ' % 
22=bar2&foo1=bar1 
QueryStringParts {foo2, complex;/?:@&=+S, foo'", foot} 


PS > Surl_parts.QueryStringParts 


Name Value 

foo2 complex; /?:@&=+S$, bar'" 
complex;/?:@&=+$, foo'" bar2 

fool bar1 


Encoded with [System.Web .HttpUtility]: :UrlEncode() 
Now, we'll decode the URL and Query String encoded with [System.Web .HttpUtility] : :UrlEncode() in the above 


example: 


https://example.vertigion.com/foos? 
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foo2=complex%3b%2f%3f%3a%40%26%3d%2b%24%2c+bar%27%w22& 
complex%3b%2f%3f%3a%40%26%3d%2b%24%2c+f00%27%22=bar2&foo1=bar1 


Suri 

‘https: //example.vertigion.com/foos?foo2=complex%3b%2 F%3 F%3 a%4O%26%3d%2 b%24%2c+bar%27%22&comp lex%3b 
%2 F%3 £%3.a%4.O%26%3 d%2b%24%2C+F 00%27%22=bar2&fool=bar1' 

Surl_parts_regex = '4(([4:/?#]+):)?(//( [4/24] *) )?( [424] *) (\2?( [44] *) )?(#(.*))?' # See Remarks 


if (Surl -match Surl_parts_regex) { 

Surl_parts = @{ 
‘Scheme’ = SMatches[2]; 
'Server' = S$Matches[4]; 
'Path' = SMatches[5]; 
‘QueryString' = SMatches[7]; 
"QueryStringParts' = @{} 

} 


foreach (Sqs in Squery_string.Split('&')) { 
Sqs_key, Sqs_value = $qs.Split('=') 
Surl_parts.QueryStringParts . Add ( 
[System.Web.HttpUtility] : :UrlDecode(Sqs_key), 
[System.Web .HttpUtility] : :UrlDecode(S$qs_value) 
) | Out-Null 
} 
} else { 
Throw [System.Management.Automation.ParameterBindingException] "Invalid URL Supplied" 


} 


This gives you back [hashtable]Surl_parts; which equals (Note: the spaces in the complex parts are spaces): 


PS > Surl_parts 


Name Value 

Scheme https 

Path /foos 

Server example.vertigion.com 
QueryString 


fo02=complex%3b%2F%3 F%3a%40%26%3d%2b%24%2c+bar%27%22 &complex%3 b%2 F%3 F%3a%4O%26%3d%2b%24%20+F00%27% 
22=bar2&foo1=bar 1 
QueryStringParts {foo2, complex;/?:@&=+$, foo'", fool} 


PS > Surl_parts.QueryStringParts 


Name Value 

foo2 complex; /?:@&=+S, bar'" 
complex;/?:@&=+$, foo'" bar2 

fool bar1 
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Chapter 47: Error handling 


This topic discuss about Error Types & Error Handling in PowerShell. 


Section 47.1: Error Types 


An error is an error, one might wonder how could there be types in it. Well, with PowerShell the error broadly falls 
into two criteria, 


e Terminating error 
e Non-Terminating error 


As the name says Terminating errors will terminate the execution and a Non-Terminating Errors let the execution 


continue to next statement. 


This is true assuming that $ErrorActionPreference value is default (Continue). $ErrorActionPreference is 
a Preference Variable which tells PowerShell what to do in case of an "Non-Terminating" error. 


Terminating error 


A terminating error can be handled with a typical try catch, as below 


Try 
{ 
Write-Host "Attempting Divide By Zero" 
1/0 
} 
Catch 
{ 
Write-Host "A Terminating Error: Divide by Zero Caught!" 
} 


The above snippet will execute and the error will be caught thru the catch block. 
Non-Terminating Error 


A Non-Terminating error in the other hand will not be caught in the catch block by default. The reason behind that 
is a Non-Terminating error is not considered a critical error. 


Try 
{ 
Stop-Process -Id 123456 
} 
Catch 
{ 
Write-Host "Non-Terminating Error: Invalid Process ID" 
} 


If you execute the above the line you won't get the output from catch block as since the error is not considered 
critical and the execution will simply continue from next command. However, the error will be displayed in the 
console. To handle a Non-Terminating error, you simple have to change the error preference. 


Try 
{ 
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Stop-Process -Id 123456 -ErrorAction Stop 


} 
Catch 


‘ 


"Non-Terminating Error: Invalid Process ID" 


} 


Now, with the updated Error preference, this error will be considered a Terminating error and will be caught in the 
catch block. 


Invoking Terminating & Non-Terminating Errors: 


Write-Error cmdlet simply writes the error to the invoking host program. It doesn't stop the execution. Where as 
throw will give you a terminating error and stop the execution 


Write-host "Going to try a non terminating Error 
Write-Error "Non terminating" 

Write-host "Going to try a terminating Error 
throw "Terminating Error " 

Write-host "This Line won't be displayed" 
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Chapter 48: Package management 


PowerShell Package Management allows you to find, install, update and uninstall PowerShell Modules and other 
packages. 


PowerShellGallery.com is the default source for PowerShell modules. You can also browse the site for available 
packages, command and preview the code. 


Section 48.1: Create the default PowerShell Module 
Repository 


If for some reason, the default PowerShell module repository PSGallery gets removed. You will need to create it. 
This is the command. 


Register-PSRepository -Default 


Section 48.2: Find a module by name 


Find-Module -Name <Name> 


Section 48.3: Install a Module by name 


Install-Module -Name <name> 


Section 48.4: Uninstall a module my name and version 


Uninstall-Module -Name <Name> -RequiredVersion <Version> 


Section 48.5: Update a module by name 


Update-Module -Name <Name> 


Section 48.6: Find a PowerShell module using a pattern 
To find a module that ends with DSC 


Find-Module -Name *DSC 
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Chapter 49: TCP Communication with 


PowerShell 
Section 49.1: TCP listener 


Function Receive-TCPMessage { 
Param ( 
[Parameter(Mandatory=Strue, Position=@) ] 
[ValidateNotNullOrEmpty() ] 
[int] $Port 
) 
Process { 
Uinyxt 
# Set up endpoint and start listening 
Sendpoint = new-object System.Net.IPEndPoint([ipaddress]::any, Sport) 
Slistener = new-object System.Net.Sockets.TcpListener SEndPoint 
Slistener.start() 


# Wait for an incoming connection 
Sdata = S$listener .AcceptTcpClient() 


# Stream setup 
Sstream = Sdata.GetStream() 
Sbytes = New-Object System.Byte[] 1024 


# Read data from stream and write it to host 

while ((S$i = Sstream.Read(Sbytes, 0, Sbytes.Length)) -ne 0){ 
SEncodedText = New-Object System. Text .ASCIIEncoding 
Sdata = SEncodedText.GetString(Sbytes,@, $i) 
Write-Output Sdata 

; 


# Close TCP connection and stop listening 
Sstream.close() 
Slistener.stop() 
} 
Catch { 
“Receive Message failed with: “n" + SError[®@] 


} 


Start listening with the following and capture any message in the variable Smsg: 


$msg = Receive-TCPMessage -Port 29800 


Section 49.2: TCP Sender 


Function Send-TCPMessage { 
Param ( 
[Parameter(Mandatory=Strue, Position=@) ] 
[ ValidateNotNull0rEmpty() ] 
[string] 
SEndPoint 


[Parameter(Mandatory=Strue, Position=1) ] 
[int] 
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SPort 


[Parameter(Mandatory=Strue, Position=2) ] 


[string] 
$Message 
) 
Process { 
# Setup connection 
SIP = [System.Net.Dns] : :GetHostAddresses(SEndPoint) 
SAddress = [System.Net.IPAddress] : :Parse(SIP) 
SSocket = New-Object System.Net.Sockets.TCPClient(SAddress, $Port) 
# Setup stream writer 
$Stream = SSocket .GetStream() 
SWriter = New-Object System.1I0.StreamWriter(SStream) 
# Write message to stream 
SMessage | % { 
SWriter .WriteLine(S_) 
SWriter .Flush() 
} 
# Close connection and stream 
SStream.Close() 
SSocket .Close() 
} 


Send a message with: 


Send-TCPMessage -Port 29800 -Endpoint 192.168.@.1 -message "My first TCP message !" 
Note: TCP messages may be blocked by your software firewall or any external facing firewalls you are trying to go 


through. Ensure that the TCP port you set in the above command is open and that you are have setup the listener 
on the same port. 
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Chapter 50: PowerShell Workflows 


PowerShell Workflow is a feature that was introduced starting with PowerShell version 3.0. Workflow definitions 
look very similar to PowerShell function definitions, however they execute within the Windows Workflow 
Foundation environment, instead of directly in the PowerShell engine. 


Several unique "out of box" features are included with the Workflow engine, most notably, job persistence. 


Section 50.1: Workflow with Input Parameters 


Just like PowerShell functions, workflows can accept input parameter. Input parameters can optionally be bound to 
a specific data type, such as a string, integer, etc. Use the standard param keyword to define a block of input 
parameters, directly after the workflow declaration. 


workflow DoSomeWork { 
param ( 
[string[]] SComputerName 
) 


Get-Process -ComputerName SComputerName 


} 


DoSomeWork -ComputerName server@1, server@2, server@3 


Section 50.2: Simple Workflow Example 


workflow DoSomeWork { 
Get-Process -Name notepad | Stop-Process 


} 


This is a basic example of a PowerShell Workflow definition. 


Section 50.3: Run Workflow as a Background Job 


PowerShell Workflows are inherently equipped with the ability to run as a background job. To call a workflow as a 
PowerShell background job, use the -AsJob parameter when invoking the workflow. 


workflow DoSomeWork { 
Get-Process -ComputerName server®@1 
Get-Process -ComputerName server@2 
Get-Process -ComputerName server@3 


} 


DoSomeWork -AsJob 


Section 50.4: Add a Parallel Block to a Workflow 


workflow DoSomeWork { 
parallel { 
Get-Process -ComputerName server®@1 
Get-Process -ComputerName server@2 
Get-Process -ComputerName server@3 
} 
} 
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One of the unique features of PowerShell Workflow is the ability to define a block of activities as parallel. To use this 
feature, use the parallel keyword inside your Workflow. 


Calling workflow activities in parallel may help to improve performance of your workflow. 
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rep 51: Embedding Managed Code (C# 


Parameter Details 
-TypeDefinition<String > Accepts the code as a string 


Specifies the Managed Code language.Accepted values: CSharp, CSharpVersion3, 


“Tanpuaees tine CSharpVersion2, VisualBasic, JScript 


This topic is to briefly describe how C# or VB .NET Managed code can be scripted and utilised within a PowerShell 
script. This topic is not exploring all facets of the Add-Type cmdlet. 


For more information on the Add-Type cmdlet, please refer to the MSDN documentation (for 5.1) here: 
https://msdn.microsoft.com/en-us/powershell/reference/5.1/microsoft.powershell.utility/add-type 


Section 51.1: C# Example 


This example shows how to embed some basic C# into a PowerShell script, add it to the runspace/session and 
utilise the code within PowerShell syntax. 


Scode = " 
using System; 


namespace MyNameSpace 


{ 
public class Responder 
{ 
public static void StaticRespond() 
Console.WriteLine("Static Response") ; 
} 
public void Respond() 
; 
Console.WriteLine("Instance Respond") ; 
} 
} 
} 
"@ 


# Check the type has not been previously added within the session, otherwise an exception is raised 
if (-not ([System.Management.Automation.PSTypeName] 'MyNameSpace.Responder' ) . Type) 


{ 
Add-Type -TypeDefinition Scode -Language CSharp; 


i 
[MyNameSpace. Responder] ::StaticRespond(); 


Sinstance = New-Object MyNameSpace.Responder; 
Sinstance.Respond(); 


Section 51.2: VB.NET Example 


This example shows how to embed some basic C# into a PowerShell script, add it to the runspace/session and 
utilise the code within PowerShell syntax. 


Scode = @" 
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Imports System 


Namespace MyNameSpace 
Public Class Responder 
Public Shared Sub StaticRespond() 
Console.WriteLine("Static Response" ) 
End Sub 


Public Sub Respond( ) 
Console.WriteLine("Instance Respond") 
End Sub 
End Class 
End Namespace 
"@ 


# Check the type has not been previously added within the session, otherwise an exception is raised 
if (-not ([System.Management.Automation.PSTypeName] 'MyNameSpace.Responder' ) . Type) 
{ 


Add-Type -TypeDefinition Scode -Language VisualBasic; 
} 
[MyNameSpace. Responder] ::StaticRespond(); 


Sinstance = New-Object MyNameSpace. Responder ; 
Sinstance.Respond(); 
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Chapter 52: How to download latest 
artifact from Artifactory using PowerShell 
script (v2.0 or below)? 


This documentation explains and provides steps to download latest artifact from a JFrog Artifactory repository 
using PowerShell Script (v2.0 or below). 


Section 52.1: PowerShell Script for downloading the latest 
artifact 


Susername = '‘user' 

Spassword= 'password' 

SDESTINATION = "D:\test\latest.tar.gz" 

Sclient = New-Object System.Net .WebClient 

Sclient.Credentials = new-object System.Net .NetworkCredential(Susername, Spassword) 
SlastModifiedResponse = 

Sclient .DownloadString('https://domain.org.com/artifactory/api/storage/FOLDER/repo/?lastModified' ) 
[System.Reflection.Assembly] : :LoadWithPartialName("System.Web.Extensions" ) 
Sserializer = New-Object System.Web.Script.Serialization.JavaScriptSerializer 
SgetLatestModifiedResponse = Sserializer.DeserializeObject(SlastModifiedResponse) 
SdownloadUriResponse = SgetLatestModifiedResponse.uri 

Write-Host Sjson.uri 

SlatestArtifcatUrlResponse=Sclient .DownloadString(SdownloadUriResponse) 
[System.Reflection.Assembly] : :LoadWithPartialName("System.Web.Extensions" ) 
Sserializer = New-Object System.Web.Script.Serialization.JavaScriptSerializer 
SgetLatestArtifact = Sserializer.DeserializeObject(SlatestArtifcatUrlResponse) 
Write-Host SgetLatestArtifact .downloadUri 

SSOURCE=SgetLatestArtifact.downloadUri 

Sclient .DownloadFile(SSOURCE, SDESTINATION) 
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Chapter 53: Comment-based help 


PowerShell features a documentation mechanism called comment-based help. It allows documenting scripts and 
functions with code comments. Comment-based help is most of the time written in comment blocks containing 
multiple help keywords. Help keywords start with dots and identify help sections that will be displayed by running 
the Get-Help cmdlet. 


Section 53.1: Function comment-based help 


<# 


. SYNOPSIS 
Gets the content of an INI file. 


. DESCRIPTION 
Gets the content of an INI file and returns it as a hashtable. 


. INPUTS 
System.String 


. OUTPUTS 
System.Collections.Hashtable 


PARAMETER FilePath 
Specifies the path to the input INI file. 


. EXAMPLE 
C:\PS>S$IniContent = Get-IniContent -FilePath file.ini 
C:\PS>$IniContent['Section1'].Key1 
Gets the content of file.ini and access Key1 from Section1. 


. LINK 
Out-IniFile 


#> 
function Get-IniContent 
{ 
[CmdletBinding()] 
Param 
( 


[Parameter (Mandatory=Strue, ValueFromPipeline=Strue) ] 

[ ValidateNotNul1l0rEmpty() ] 

[ValidateScript({(Test-Path $_) -and ((Get-Item $_).Extension -eq ".ini")})] 
[System.String]$FilePath 


) 

# Initialize output hash table. 
Sini = @{} 

switch -regex -file SFilePath 


INTC CEN IS@ # Section 


{ 
Ssection = Smatches[1] 
Sini[Ssection] = @{} 
SCommentCount = @ 

} 

"AC; .*)S" # Comment 

{ 


if( !(Ssection) ) 
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Ssection = "No-Section" 
Sini[Ssection] = @{} 
} 
Svalue = Smatches[1] 
SCommentCount = SCommentCount + 1 
Sname = "Comment" + SCommentCount 
Sini[Ssection][Sname] = Svalue 


} 
"(.+2)\s*=\s*(.*)" # Key 


if( !(Ssection) ) 


Ssection = "No-Section" 
Sini[Ssection] = @{} 
} 


Sname, Svalue = Smatches[1..2] 
Sini[Ssection][Sname] = Svalue 


} 


return Sini 


The above function documentation can be displayed by running Get-Help -Name Get-IniContent -Full: 
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PS C:\Scripts> Get-Help -Name Get-IniContent -Full 


NAME 
Get-IniContent 


SYNOPSIS 
Gets the content of an INI file. 


SYNTAX 
Get-IniContent [-FilePath] <String> [<CommonParameters>] 


DESCRIPTION 
Gets the content of an INI file and returns it as a hashtable. 


PARAMETERS 
-FilePath <String> 
Specifies the path to the input INI file. 


Required? true 
Position? 1 

Default value 

Accept pipeline input? true (ByValue) 
Accept wildcard characters? false 


<CommonPar ameters> 
This cmdlet supports the common parameters: Verbose, Debug, 
ErrorAction, ErrorVariable, WarningAction, WarningVariable, 
OutBuffer, PipelineVariable, and OutVariable. For more information, see 
about_CommonParameters (http://go.mrosoft. com/fwlink/?LinkID=113216). 
INPUTS 
System. String 


OUTPUTS 
System.Collections. Hashtable 


C:\PS>$IniContent = Get-IniContent -FilePath file.ini 


C:\PS>$IniContent [*Sectioni1*].Keyl1 
Gets the content of file.ini and access Keyl from Sectioni1. 


RELATED LINKS 
Out-IniFile 


PS C:\Scripts> 


Notice that the comment-based keywords starting with a . match the Get-Help result sections. 


Section 53.2: Script comment-based help 


<# 


. SYNOPSIS 
Reads a CSV file and filters it. 


. DESCRIPTION 
The ReadUsersCsv.ps1 script reads a CSV file and filters it on the ‘UserName’ column. 
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.PARAMETER Path 
Specifies the path of the CSV input file. 


. INPUTS 
None. You cannot pipe objects to ReadUsersCsv.ps1. 


OUTPUTS 
None. ReadUsersCsv.ps1 does not generate any output. 


. EXAMPLE 
C:\PS> .\ReadUsersCsv.ps1 -Path C:\Temp\Users.csv -UserName j.doe 


#> 

Param 

( 
[Parameter (Mandatory=Strue, ValueFromPipeline=Sfalse) ] 
[System.String] 
SPath, 
[Parameter (Mandatory=Strue, ValueFromPipeline=Sfalse) ] 
[System.String] 
SUserName 

) 


Import-Csv -Path $Path | Where-Object -FilterScript {S$_.UserName -eq SUserName} 


The above script documentation can be displayed by running Get-Help -Name ReadUsersCsv.ps1 -Full: 
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PS C:\Scripts> Get-Help -Name .\ReadUsersCsv.psi -Full 


NAME 
C:\Scripts\ReadUsersCsv. psi 


SYNOPSIS 
Reads a CSV file and filters it. 


SYNTAX 
C:\Scripts\ReadUsersCsv.psi [-Path] <String> [-UserName] <String> [<CommonParameters>] 


DESCRIPTION 
The ReadUsersCsv.psi1 script reads a CSV file and filters it on the ‘UserName’ column. 


PARAMETERS 
-Path <String> 
Specifies the path of the CSV input file. 


Required? true 
Position? 1 
Default value 

Accept pipeline input? false 
Accept wildcard characters? false 


-UserName <String> 
Specifies the user name that will be used to filter the CSV file. 


Required? true 
Position? 2 
Default value 

Accept pipeline input? false 
Accept wildcard characters? false 


<CommonPar ameter s> 
This camdlet supports the common parameters: Verbose, Debug, 
ErrorAction, ErrorVariable, WarningAction, WarningVariable, 
OutBuffer, PipelineVariable, and OutVariable. For more information, see 
about_CommonParameters (http://go.mrosoft. com/fwlink/?LinkID=113216). 
INPUTS 
None. You cannot pipe objects to ReadUsersCsv.psi1. 


OUTPUTS 
None. ReadUsersCsv.psi does not generate any output. 


EXAMPLE 1 


C:\PS>.\ReadUsersCsv.psi -Path C:\Temp\Users.csv -UserName j.doe 


RELATED LINKS 


PS C:\Scripts> 
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Chapter 54: Archive Module 


Parameter Details 
CompressionLevel (Compress-Archive only) Set compression level to either Fastest, Optimal or NoCompression 
Confirm Prompts for confirmation before running 
Force Forces the command to run without confirmation 
LiteralPath Path that is used literally, no wildcards supported, use , to specify multiple paths 
Path Path that can contain wildcards, use , to specify multiple paths 
Update (Compress-Archive only) Update existing archive 
Whatlf Simulate the command 


The Archive module Microsoft .PowerShe1l.Archive provides functions for storing files in ZIP archives (Compress- 


Archive) and extracting them (Expand-Archive). This module is available in PowerShell 5.0 and above. 


In earlier versions of PowerShell the Community Extensions or .NET System.|O.Compression.FileSystem could be 


used. 


Section 54.1: Compress-Archive with wildcard 


Compress-Archive -Path C:\Documents\* -CompressionLevel Optimal -DestinationPath 
C:\Archives\Documents.zip 


This command: 


¢ Compresses all files in C:\Documents 
e Uses Optimal compression 
e Save the resulting archive in C:\Archives\Documents.zip 
°o -DestinationPath will add .zipif not present. 
o -LiteralPath can be used if you require naming it without .zip. 


Section 54.2: Update existing ZIP with Compress-Archive 


Compress-Archive -Path C:\Documents\* -Update -DestinationPath C:\Archives\Documents.zip 


e this will add or replace all files Documents.zip with the new ones from C:\Documents 


Section 54.3: Extract a Zip with Expand-Archive 


Expand-Archive -Path C:\Archives\Documents.zip -DestinationPath C:\Documents 


e this will extract all files from Documents. zip into the folder C:\Documents 
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Chapter 55: Infrastructure Automation 


Automating Infrastructure Management Services results in reducing the FTE as well as cumulatively getting better 
ROI using multiple tools, orchestrators, orchestration Engine , scripts and easy UI 


Section 55.1: Simple script for black-box integration test of 
console applications 


This is a simple example on how you can automate tests for a console application that interact with standard input 
and standard output. 


The tested application read and sum every new line and will provide the result after a single white line is provided. 
The power shell script write "pass" when the output match. 


Sprocess = New-Object System.Diagnostics.Process 
Sprocess.StartInfo.FileName = ".\ConsoleApp1.exe" 
Sprocess.StartInfo.UseShellExecute = Sfalse 
Sprocess.StartInfo.RedirectStandardOutput = Strue 
Sprocess.StartInfo.RedirectStandardInput = Strue 
if ( Sprocess.Start() ) { 

# input 

Sprocess.StandardInput.WriteLine("1"); 

Sprocess.StandardInput.WriteLine("2"); 

Sprocess.StandardInput.WriteLine("3"); 

Sprocess.StandardInput.WriteLine(); 

Sprocess.StandardInput.WriteLine(); 

# output check 

Soutput = Sprocess.StandardOutput .ReadToEnd() 

if ( SOuupUE)) 4 

if ( Soutput.Contains("sum 6") ) { 
Write "pass" 


} 
else { 

Write-Error Soutput 
} 


} 
Sprocess.WaitForExit() 
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Chapter 56: PSScriptAnalyzer - PowerShell 
Script Analyzer 


PSScriptAnalyzer, https://github.com/PowerShell/PSScriptAnalyzer, is a static code checker for Windows PowerShell 
modules and scripts. PSScriptAnalyzer checks the quality of Windows PowerShell code by running a set of rules 
based on PowerShell best practices identified by the PowerShell Team and community. It generates 
DiagnosticResults (errors and warnings) to inform users about potential code defects and suggests possible 
solutions for improvements. 


PS> Install-Module -Name PSScriptAnalyzer 


Section 56.1: Analyzing scripts with the built-in preset rulesets 


ScriptAnalyzer ships with sets of built-in preset rules that can be used to analyze scripts. These include: PSGallery, 
DSC and CodeFormatting. They can be executed as follows: 


PowerShell Gallery rules 

To execute the PowerShell Gallery rules use the following command: 
Invoke-ScriptAnalyzer -Path /path/to/module/ -Settings PSGallery -Recurse 
DSC rules 

To execute the DSC rules use the following commana: 
Invoke-ScriptAnalyzer -Path /path/to/module/ -Settings DSC -Recurse 

Code formatting rules 

To execute the code formatting rules use the following command: 


Invoke-ScriptAnalyzer -Path /path/to/module/ -Settings CodeFormatting -Recurse 


Section 56.2: Analyzing scripts against every built-in rule 
To run the script analyzer against a single script file execute: 


Invoke-ScriptAnalyzer -Path myscript.ps1 


This will analyze your script against every built-in rule. If your script is sufficiently large that could result in a lot of 
warnings and/or errors. 


To run the script analyzer against a whole directory, specify the folder containing the script, module and DSC files 
you want analyzed. Specify the Recurse parameter if you also want sub-directories searched for files to analyze. 


Invoke-ScriptAnalyzer -Path . -Recurse 


Section 56.3: List all built-in rules 


To see all the built-in rules execute: 
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Get-ScriptAnalyzerRule 
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Chapter 57: Desired State Configuration 


Section 57.1: Simple example - Enabling WindowsFeature 


configuration EnableIISFeature 


{ 
node localhost 
{ 
WindowsFeature IIS 
{ 
Ensure = “Present” 
Name = “Web-Server” 
} 
} 
} 


If you run this configuration in Powershell (EnablellSFeature), it will produce a localhost.mof file. This is the 
"compiled" configuration you can run on a machine. 


To test the DSC configuration on your localhost, you can simply invoke the following: 


Start-DscConfiguration -ComputerName localhost -Wait 


Section 57.2: Starting DSC (mof) on remote machine 


Starting a DSC on a remote machine is almost just as simple. Assuming you've already set up Powershell remoting 
(or enabled WSMAN). 


SremoteComputer = “myserver.somedomain.com" 
Scred = (Get-Credential) 
Start-DSCConfiguration -ServerName SremoteComputer -Credential Scred -Verbose 


Nb: Assuming you have compiled a configuration for your node on your localmachine (and that the file 
myserver.somedomain.com.mof is present prior to starting the configuration) 


Section 57.3: Importing psd (data file) into local variable 
Sometimes it can be useful to test your Powershell data files and iterate through the nodes and servers. 
Powershell 5 (WMEFS) added this neat little feature for doing this called Import-PowerShellDataFile . 
Example: 


Sdata = Import-PowerShellDataFile -path .\MydataFile.psd1 
Sdata.AllNodes 


Section 57.4: List available DSC Resources 
To list available DSC resources on your authoring node: 
Get-DscResource 


This will list all resources for all installed modules (that are in your PSModulePath) on your authoring node. 
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To list all available DSC resources that can be found in the online sources (PSGallery ++) on WME 5: 


Find-DSCResource 


Section 57.5: Importing resources for use in DSC 


Before you can use a resource in a configuration, you must explicitly import it. Just having it installed on your 
computer, will not let you use the resource implicitly. 


Import a resource by using Import-DscResource . 
Example showing how to import the PSDesiredStateConfiguration resource and the File resource. 


Configuration InstallPreReqs 


{ 

param(); # params to DSC goes here. 

Import-DscResource PSDesiredStateConfiguration 

File CheckForTmpFolder { 
Type = 'Directory' 
DestinationPath = 'C:\Tmp' 
Ensure = "Present" 

} 
} 


Note: In order for DSC Resources to work, you must have the modules installed on the target machines when 
running the configuration. If you don't have them installed, the configuration will fail. 
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Chapter 58: Using ShouldProcess 


Parameter 
Target 


Action 


Details 
The resource being changed. 


The operation being performed. Defaults to the name of the cmdlet. 


Section 58.1: Full Usage Example 


Other examples couldn't clearly explain to me how to trigger the conditional logic. 


This example also shows that underlying commands will also listen to the -Confirm flag! 


<# 


Restart-Win32Computer 


#> 


function Restart-Win32Computer 


[ CndletBinding(SupportsShouldProcess=Strue, ConfirmImpact="High" ) ] 


[ parameter (Mandatory=Strue, ValueFromPipeline=Strue, ValueFromPipelineByPropertyName=Strue) ] 


( 


[string[]]ScomputerName, 
[ parameter(Mandatory=Strue) ] 


[string][ValidateSet("Restart", "LogOff", "Shutdown", "PowerOff")] Saction, 


[boolean]Sforce = Sfalse 


{ 

param 
) 
BEGIN { 


# translate action to numeric value required by the method 
switch(Saction) { 


"Restart" 
{ 
Seaction = 2 
break 
} 
Hog Oiitie 
{ 
S_action = @ 
break 
} 
"Shutdown" 
{ 
$_action = 2 
break 
} 
"PowerOff" 
{ 
Sractson = 6 
break 
} 
} 
# to force, add 4 to the value 
if(Sforce) 
{ 
S_action += 4 
} 
write-verbose "Action set to Saction" 
} 
PROCESS { 


write-verbose “Attempting to connect to Scomputername' 
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# this is how we support -whatif and -confirm 
# which are enabled by the SupportsShouldProcess 
# parameter in the cmdlet bindnig 
if (Spscmdlet.ShouldProcess(Scomputername)) { 
get-wmiobject win32_operatingsystem -computername Scomputername | invoke-wmimethod -name 
Win32Shutdown -argumentlist S_action 


} 
} 
} 
#Usage: 


#This will only output a description of the actions that this command would execute if -WhatIf is 
removed. 
‘localhost’, 'server1'| Restart-Win32Computer -action LogOff -whatif 


#This will request the permission of the caller to continue with this item. 
#Attention: in this example you will get two confirmation request because all cmdlets called by 


this cmdlet that also support ShouldProcess, will ask for their own confirmations... 
‘localhost’, 'server1'| Restart-Win32Computer -action LogOff -Confirm 


Section 58.2: Adding -Whatlf and -Confirm support to your 
cmdlet 


function Invoke-MyCmdlet { 
[CmdletBinding(SupportsShouldProcess = Strue)] 
param() 
He ores 


Section 58.3: Using ShouldProcess() with one argument 


if (S$PSCmdlet.ShouldProcess("Target of action")) { 
# Do the thing 
} 


When using -WhatIf: 
What if: Performing the action "Invoke-MyCmdlet" on target "Target of action" 
When using -Confirm: 


Are you sure you want to perform this action? Performing operation "Invoke-MyCmdlet" on target "Target of action" 
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"): 
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Chapter 59: Scheduled tasks module 


Examples of how to use the Scheduled Tasks module available in Windows 8/Server 2012 and on. 


Section 59.1: Run PowerShell Script in Scheduled Task 
Creates a scheduled task that executes immediately, then on start up to run C:\myscript.ps1 as SYSTEM 


SScheduledTaskPrincipal = New-ScheduledTaskPrincipal -UserId "SYSTEM" -LogonType ServiceAccount 
SScheduledTaskTrigger1 = New-ScheduledTaskTrigger -AtStartup 

SScheduledTaskTrigger2 = New-ScheduledTaskTrigger -Once -At $(Get-Date) -RepetitionInterval 
"Q@0:01:00" -RepetitionDuration $([timeSpan] "24855.03:14:07") 

SScheduledTaskActionParams = @{ 


Execute = "PowerShell.exe" 
Argument = '-executionpolicy Bypass -NonInteractive -c C:\myscript.ps1 -verbose >> 
C:\output.log 2>&1"' 


} 
SScheduledTaskAction = New-ScheduledTaskAction @ScheduledTaskActionParams 


Register-ScheduledTask -Principal SScheduledTaskPrincipal -Trigger 
@($ScheduledTaskTrigger1, SScheduledTaskTrigger2) -TaskName "Example Task" -Action 
S$ScheduledTaskAction 
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Chapter 60: ISE module 


Windows PowerShell Integrated Scripting Environment (ISE) is a host application that enables you to write, run, and 
test scripts and modules in a graphical and intuitive environment. Key features in Windows PowerShell ISE include 
syntax-coloring, tab completion, Intellisense, visual debugging, Unicode compliance, and context-sensitive Help, and 
provide a rich scripting experience. 


Section 60.1: Test Scripts 


The simple, yet powerful use of the ISE is e.g. writing code in the top section (with intuitive syntax coloring) and run 
the code by simply marking it and hitting the F8 key. 


function Get-Sum 


{ 
foreach ($i in SInput) 
{SSum += $i} 
$sum 


1.2.40 | Get-—Sum 


#output 
9 
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Chapter 61: Creating DSC Class-Based 
Resources 


Starting with PowerShell version 5.0, you can use PowerShell class definitions to create Desired State Configuration 
(DSC) Resources. 


To aid in building DSC Resource, there's a [DscResource() ] attribute that's applied to the class definition, anda 
[DscProperty()] resource to designate properties as configurable by the DSC Resource user. 


Section 61.1: Create a DSC Resource Skeleton Class 


[DscResource()] 
class File { 


} 


This example demonstrates how to build the outer section of a PowerShell class, that declares a DSC Resource. You 
still need to fill in the contents of the class definition. 


Section 61.2: DSC Resource Skeleton with Key Property 


[DscResource()] 
class Ticket { 
[DscProperty(Key) ] 
[string] $TicketId 
} 


A DSC Resource must declare at least one key property. The key property is what uniquely identifies the resource 
from other resources. For example, let's say that you're building a DSC Resource that represents a ticket ina 
ticketing system. Each ticket would be uniquely represented with a ticket ID. 


Each property that will be exposed to the user of the DSC Resource must be decorated with the [DscProperty() ] 
attribute. This attributes accepts a key parameter, to indicate that the property is a key attribute for the DSC 
Resource. 


Section 61.3: DSC Resource with Mandatory Property 


[DscResource()] 

class Ticket { 
[DscProperty(Key) ] 
[string] $TicketId 


[DscProperty(Mandatory) ] 
[string] SSubject 
} 


When building a DSC Resource, you'll often find that not every single property should be mandatory. However, 
there are some core properties that you'll want to ensure are configured by the user of the DSC Resource. You use 
the Mandatory parameter of the [DscResource()] attribute to declare a property as required by the DSC Resource's 
user. 


In the example above, we've added a Subject property to a Ticket resource, that represents a unique ticket in a 
ticketing system, and designated it as a Mandatory property. 
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Section 61.4: DSC Resource with Required Methods 


[DscResource()] 

class Ticket { 
[DscProperty(Key) ] 
[string] $TicketId 


# The subject line of the ticket 
[DscProperty(Mandatory) ] 
[string] SSubject 


# Get / Set if ticket should be open or closed 
[DscProperty(Mandatory) ] 
[string] STicketState 


[void] Set() { 
# Create or update the resource 


} 


[Ticket] Get() { 
# Return the resource's current state as an object 
$TicketState = [Ticket]: :new() 
return STicketState 

} 


[bool] Test() { 
# Return Strue if desired state is met 
# Return Sfalse if desired state is not met 
return Sfalse 
} 
} 


This is a complete DSC Resource that demonstrates all of the core requirements to build a valid resource. The 
method implementations are not complete, but are provided with the intention of showing the basic structure. 
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Chapter 62: WMI and CIM 


Section 62.1: Querying objects 


CIM/WMI is most commonly used to query information or configuration on a device. Through a class that 
represents a configuration, process, user etc. In PowerShell there are multiple ways to access these classes and 
instances, but the most common ways are by using the Get-CimInstance (CIM) or Get-Wmi0bject (WMI) cmdlets. 


List all objects for CIM-class 


You can list all instances of a class. 


Version = 3.0 


CIM: 


> Get-CimInstance -ClassName Win32_Process 


ProcessId Name HandleCount WorkingSetSize VirtualSize 
0 System Idle Process 0 4096 65536 

4 System 1459 32768 3563520 

480 Secure System 0 3731456 0 

484 smss.exe 52 372736 2199029891072 
WMI: 


Get-WmiObject -Class Win32_Process 
Using a filter 


You can apply a filter to only get specific instances of a CIM/WMI-class. Filters are written using WQL (default) or CQL 
(add -QueryDialect CQL). -Filter uses the WHERE-part of a full WQL/CQL-query. 


Version = 3.0 


CIM: 

Get-CimInstance -ClassName Win32_Process -Filter "Name = 'powershell.exe'" 

ProcessId Name HandleCount WorkingSetSize VirtualSize 

4800 powershell.exe 676 88305664 2199697199104 

WMI: 

Get-WmiObject -Class Win32_Process -Filter "Name = 'powershell.exe'" 

Caption : powershell.exe 

CommandLine : "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" 
CreationClassName : Win32 Process 

CreationDate : 20160913184324 . 393887+120 
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CSCreationClassName : Win32_ComputerSystem 


CSName : STACKOVERFLOW- PC 

Description : powershell.exe 

ExecutablePath : C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 
ExecutionState : 

Handle : 4800 

HandleCount : 673 


Using a WQL-query: 


You can also use a WQL/CQL-query to query and filter instances. 


Version = 3.0 


CIM: 


Get-CimInstance -Query "SELECT * FROM Win32_Process WHERE Name = 'powershell.exe'" 


ProcessId Name HandleCount WorkingSetSize VirtualSize 


4800 powershell.exe 673 88387584 2199696674816 


Querying objects in a different namespace: 


Version = 3.0 


CIM: 


Get-CimInstance -Namespace "root/SecurityCenter2" -ClassName AntiVirusProduct 


displayName : Windows Defender 

instanceGuid : {D68DDC3A-831F -4fae-9E44-DA132C1ACF46} 
pathToSignedProductExe : %ProgramFiles%\Windows Defender\MSASCui.exe 
pathToSignedReportingExe : %ProgramFiles%\Windows Defender\MsMpeng. exe 
productState : 397568 

timestamp : Fri, 09 Sep 2016 21:26:41 GMT 
PSComputerName : 

WMI: 


Get-WmiObject -Namespace "root\SecurityCenter2" -Class AntiVirusProduct 


__ GENUS 2 
__ CLASS : AntiVirusProduct 
__SUPERCLASS : 
__ DYNASTY : AntiVirusProduct 
__RELPATH : AntiVirusProduct.instanceGuid="{D68DDC3A -831F -4 fae -9E44-DA132C1ACF46}" 
__PROPERTY_COUNT : 6 
__ DERIVATION : {} 
__ SERVER : STACKOVERFLOW- PC 
__ NAMESPACE : pen COT See at SUES cerZ 
__ PATH \\STACKOVERFLOW- 


PC\ROOT\SecurityCenter2: AntiVirusProduct. instanceGuid="{D68DDC3A -831F -4fae-9E44-DA132C1ACF46}" 
displayName : Windows Defender 

instanceGuid : {D68DDC3A-831F -4fae-9E44 -DA132C1ACF46} 

pathToSignedProductExe : %ProgramFiles%\Windows Defender\MSASCui. exe 
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pathToSignedReportingExe : %ProgramFiles%\Windows Defender\MsMpeng. exe 


productState : 397568 
timestamp : Fri, 09 Sep 2016 21:26:41 GMT 
PSComputerName : STACKOVERFLOW- PC 


Section 62.2: Classes and namespaces 


There are many classes available in CIM and WMI which are separated into multiple namespaces. The most 
common (and default) namespace in Windows is root /cimv2. To find the right class, it can useful to list all or 
search. 


List available classes 


You can list all available classes in the default namespace (root /cimv2) on a computer. 


Version = 3.0 


CIM: 
Get-CimClass 
WMI: 


Get-WmiObject -List 


Search for a class 


You can search for specific classes using wildcards. Ex: Find classes containing the word process. 


Version = 3.0 


CIM: 


Get-CimClass -ClassName "*Process*" 


NameSpace: ROOT/CIMV2 


CimClassName CimClassMethods CimClassProperties 
Win32_ProcessTrace {} {SECURITY_DESCRIPTOR, TIME_CREATED, 
ParentProcessID, ProcessID...} 

Win32_ProcessStartTrace {} {SECURITY_DESCRIPTOR, TIME_CREATED 
ParentProcessID, ProcessID...} 

Win32_ProcessStopTrace {} {SECURITY_DESCRIPTOR, TIME_CREATED 
ParentProcessID, ProcessID...} 

CIM_Process {} {Caption, Description, InstallDate, 
Name...} 

Win32_Process {Create, Terminat... {Caption, Description, InstallDate 
Name...} 

CIM_Processor {SetPowerState, R... {Caption, Description, InstallDate, 
Name...} 

Win32_Processor {SetPowerState, R... {Caption, Description, InstallDate, 
Name...} 

WMI: 
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Get-WmiObject -List -Class "*Process*" 


List classes in a different namespace 


The root namespace is simply called root. You can list classes in another namespace using the -NameSpace 


parameter. 


Version = 3.0 


CIM: 


Get-CimClass -Namespace "root/SecurityCenter2" 


NameSpace: ROOT/SecurityCenter2 


CimClassName CimClassMethods 


AntiSpywareProduct {} 


pathToSignedProductExe, pathToSignedReportingE... 


AntiVirusProduct {} 


pathToSignedProductExe, pathToSignedReportingE... 


FirewallProduct {} 


pathToSignedProductExe, pathToSignedReportingE... 


WMI: 


Get-WmiObject -Class "__Namespace" -Namespace "root" 


List available namespaces 


CimClassProperties 


{displayName, instanceGuid 


{displayName, instanceGuid, 


{displayName, instanceGuid 


To find available child-namespaces of root (or another namespace), query the objects in the __NAMESPACE-class for 


that namespace. 


Version = 3.0 


CIM: 


Get-CimInstance -Namespace "root" -ClassName 
Name PSComputerName 


subscription 
DEFAULT 

CIMV2 

msdtc 

Cl 

SECURITY 
HyperVCluster 
SecurityCenter2 
RSOP 

PEH 
StandardCimv2 
WMI 

directory 
Policy 
virtualization 
Interop 
Hardware 
ServiceModel 
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SecurityCenter 
Microsoft 
aspnet 
Appv 

WMI: 


Get-WmiObject -List -Namespace "root" 
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Chapter 63: ActiveDirectory module 


This topic will introduce you to some of the basic cmdlets used within the Active Directory Module for PowerShell, 
for manipulating Users, Groups, Computers and Objects. 


Section 63.1: Users 

Retrieve Active Directory User 

Get-ADUser -Identity JohnSmith 

Retrieve All Properties Associated with User 

Get-ADUser -Identity JohnSmith -Properties * 

Retrieve Selected Properties for User 

Get-ADUser -Identity JohnSmith -Properties * | Select-Object -Property sAMAccountName, Name, Mail 
New AD User 


New-ADUser -Name "MarySmith" -GivenName "Mary" -Surname "Smith" -DisplayName "MarySmith" -Path 
"CN=Users, DC=Domain, DC=Local" 


Section 63.2: Module 


#Add the ActiveDirectory Module to current PowerShell Session 
Import-Module ActiveDirectory 


Section 63.3: Groups 

Retrieve Active Directory Group 

Get-ADGroup -Identity "My-First-Group" #Ensure if group name has space quotes are used 
Retrieve All Properties Associated with Group 

Get-ADGroup -Identity "My-First-Group" -Properties * 

Retrieve All Members of a Group 


Get-ADGroupMember -Identity "My-First-Group" | Select-Object -Property sAMAccountName 
Get-ADgroup "MY-First-Group" -Properties Members | Select -ExpandProperty Members 


Add AD User to an AD Group 


Add-ADGroupMember -Identity "My-First-Group" -Members "JohnSmith" 


New AD Group 


New-ADGroup -GroupScope Universal -Name "My-Second-Group" 
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Section 63.4: Computers 

Retrieve AD Computer 

Get-ADComputer -Identity "JohnLaptop" 

Retrieve All Properties Associated with Computer 
Get-ADComputer -Identity "JohnLaptop" -Properties * 
Retrieve Select Properties of Computer 


Get-ADComputer -Identity "JohnLaptop" -Properties * | Select-Object -Property Name, Enabled 


Section 63.5: Objects 
Retrieve an Active Directory Object 


#Identity can be ObjectGUID, Distinguished Name or many more 
Get-ADObject -Identity "ObjectGUID@7898" 


Move an Active Directory Object 


Move-ADObject -Identity "CN=JohnSmith, OU=Users, DC=Domain, DC=Local" -TargetPath 
"OU=SuperUser , DC=Domain, DC=Local" 


Modify an Active Directory Object 


Set-ADObject -Identity "CN=My-First-Group, O0U=Groups,DC=Domain,DC=local" -Description "This is My 
First Object Modification" 
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Chapter 64: SharePoint Module 


Section 64.1: Loading SharePoint Snap-In 


Loading the SharePoint Snapin can be done using the following: 


Add-PSSnapin "Microsoft.SharePoint .PowerShell" 


This only works in the 64bit version of PowerShell. If the window says "Windows PowerShell (x86)" in the title 


you are using the incorrect version. 


If the Snap-In is already loaded, the code above will cause an error. Using the following will load only if necessary, 


which can be used in Cmdlets/functions: 
if ((Get-PSSnapin "Microsoft.SharePoint .PowerShell" -ErrorAction SilentlyContinue) -eq $null) 


{ 
Add-PSSnapin "Microsoft.SharePoint.PowerShell" 


} 
Alternatively, if you start the SharePoint Management Shell, it will automatically include the Snap-In. 
To get a list of all the available SharePoint Cmdlets, run the following: 
Get-Command -Module Microsoft.SharePoint .PowerShell 
Section 64.2: Iterating over all lists of a site collection 


Print out all list names and the item count. 


Ssite = Get-SPSite -Identity https://mysharepointsite/sites/test 
foreach (Sweb in Ssite.AllWebs) 


{ 
foreach ($list in Sweb.Lists) 
; 
# Prints list title and item count 
Write-Output "S(Slist.Title), Items: $(S$list.ItemCount) " 
} 
} 


Ssite.Dispose() 


Section 64.3: Get all installed features on a site collection 


Get-SPFeature -Site https://mysharepointsite/sites/test 


Get-SPFeature can also be run on web scope (-Web <WebUr1>), farm scope (-Farm) and web application scope (- 
WebApplication <WebAppUr1>). 


Get all orphaned features on a site collection 


Another usage of Get-SPFeature can be to find all features that have no scope: 


Get-SPFeature -Site https://mysharepointsite/sites/test |? { $_.Scope -eq Snull ) 
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Chapter 65: Introduction to Psake 


Section 65.1: Basic outline 


Task Rebuild -Depends Clean, Build { 
"Rebuild" 
} 


Task Build { 
“Buselid! 
} 


Task Clean { 
"Clean" 


} 


Task default -Depends Build 
Section 65.2: FormatTaskName example 


# Will display task as: 


# -------- Rebuild -------- 
# -------- Build -------- 
FormatTaskName "-------- {0} -------- ay 


# will display tasks in yellow colour: 

# Running Rebuild 

FormatTaskName { 

param($taskName) 

"Running $taskName" - foregroundcolor yellow 


} 


Task Rebuild -Depends Clean, Build { 
"Rebuild" 
} 


Task Build { 
"Build" 
} 


Task Clean { 
"Clean" 


r 


Task default -Depends Build 


Section 65.3: Run Task conditionally 


propreties { 
SisOk = Sfalse 
} 


# By default the Build task won't run, unless there is a param Strue 
Task Build -precondition { return SisOk } { 
“Buddld® 


} 
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Task Clean { 
"Clean" 


} 


Task default -Depends Build 


Section 65.4: ContinueOnError 


Task Build -depends Clean { 
"Build" 
} 


Task Clean -ContinueOnError { 
"Clean" 


throw "throw on purpose, but the task will continue to run" 


} 


Task default -Depends Build 
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Chapter 66: Introduction to Pester 
Section 66.1: Getting Started with Pester 


To get started with unit testing PowerShell code using the Pester-module, you need to be familiar with three 
keywords/commands: 


e Describe: Defines a group of tests. All Pester test files needs at least one Describe-block. 
e It: Defines an individual test. You can have multiple It-blocks inside a Describe-block. 
e Should: The verify/test command. It is used to define the result that should be considered a successful test. 


Sample: 


Import-Module Pester 


#Sample function to run tests against 
function Add-Numbers{ 

param(Sa, Sb) 

return [int]Sa + [int]Sb 
} 


#Group of tests 
Describe "Validate Add-Numbers" { 


#Individual test cases 

It "Should add 2 + 2 to equal 4" { 
Add-Numbers 2 2 | Should Be 4 

} 


It "Should handle strings" { 
Add-Numbers "2" "2" | Should Be 4 
} 


It "Should return an integer" { 
Add-Numbers 2.3 2 | Should BeOfType Int32 
} 


Output: 


Describing Validate Add-Numbers 

[+] Should add 2 + 2 to equal 4 33ms 
[+] Should handle strings 19ms 

[+] Should return an integer 23ms 
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Chapter 67: Handling Secrets and 
Credentials 


In Powershell, to avoid storing the password in clear text we use different methods of encryption and Store it as 
secure string. When you are not specifying a key or securekey, this will only work for the same user on the same 
computer will be able to decrypt the encrypted string if you’re not using Keys/SecureKeys. Any process that runs 
under that same user account will be able to decrypt that encrypted string on that same machine. 


Section 67.1: Accessing the Plaintext Password 


The password in a credential object is an encrypted [SecureString]. The most straightforward way is to get a 
[NetworkCredential] which does not store the password encrypted: 


Scredential = Get-Credential 
SplainPass = Scredential.GetNetworkCredential() .Password 


The helper method (.GetNetworkCredential()) only exists on [PSCredential] objects. 
To directly deal with a [SecureString], use .NET methods: 


Sbstr = [System.Runtime.InteropServices.Marshal] : :SecureStringToBSTR(SsecStr) 
SplainPass = [System.Runtime.InteropServices.Marshal] ::PtrToStringAuto(Sbstr) 


Section 67.2: Prompting for Credentials 


To prompt for credentials, you should almost always use the Get-Credential cmdlet: 


Scredential = Get-Credential 

Pre-filled user name: 

Scredential = Get-Credential -UserName ‘myUser' 
Add a custom prompt message: 


Scredential = Get-Credential -Message 'Please enter your company email address and password. ' 


Section 67.3: Working with Stored Credentials 

To store and retrieve encrypted credentials easily, use PowerShell's built-in XML serialization (Clixml): 
Scredential = Get-Credential 

Scredential | Export-CliXml -Path 'C:\My\Path\cred.xml' 

To re-import: 

Scredential = Import-CliXml -Path 'C:\My\Path\cred.xml' 


The important thing to remember is that by default this uses the Windows data protection API, and the key used to 
encrypt the password is specific to both the user and the machine that the code is running under. 


As a result, the encrypted credential cannot be imported by a different user nor the same user ona 
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different computer. 


By encrypting several versions of the same credential with different running users and on different computers, you 
can have the same secret available to multiple users. 


By putting the user and computer name in the file name, you can store all of the encrypted secrets in a way that 
allows for the same code to use them without hard coding anything: 


Encrypter 


# run as each user, and on each computer 
Scredential = Get-Credential 


Scredential | Export-ClixXml -Path "C:\My\Secrets\myCred_S {env :USERNAME }_$ {env :COMPUTERNAME}. xml" 
The code that uses the stored credentials: 
Scredential = Import-CliXml -Path "C:\My\Secrets\myCred_$ {env :USERNAME }_$ {env :COMPUTERNAME}. xm1" 


The correct version of the file for the running user will be loaded automatically (or it will fail because the file doesn't 
exist). 


Section 67.4: Storing the credentials in Encrypted form and 
Passing it as parameter when Required 


Susername = "“user1@domain.com" 

SpwdTxt = Get-Content "C:\temp\Stored_Password.txt" 

SsecurePwd = SpwdTxt | ConvertTo-SecureString 

ScredObject = New-Object System.Management.Automation.PSCredential -ArgumentList Susername, 
SsecurePwd 

# Now, ScredObject is having the credentials stored and you can pass it wherever you want. 


## Import Password with AES 


Susername = “user1@domain.com" 

SAESKey = Get-Content SAESKeyFilePath 

SpwdTxt = Get-Content SSecurePwdFilePath 

SsecurePwd = SpwdTxt | ConvertTo-SecureString -Key SAESKey 

ScredObject = New-Object System.Management.Automation.PSCredential -ArgumentList Susername, 
SsecurePwd 


# Now, ScredObject is having the credentials stored with AES Key and you can pass it wherever you 
want. 
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Chapter 68: Security and Cryptography 


Section 68.1: Calculating a string’s hash codes via .Net 
Cryptography 


Utilizing Net System.Security.Cryptography .HashAlgorithm namespace to generate the message hash code with 
the algorithms supported. 


Sexample="Nobody expects the Spanish Inquisition." 


#calculate 


Shash=[System.Security.Cryptography .HashAlgorithm] : :Create("sha256") .ComputeHash( 
[System.Text.Encoding] : :UTF8.GetBytes(Sexample) ) 


#convert to hex 
[System.BitConverter] ::ToString(Shash) 


#2E-DF-DA-DA-56-52-5B-12-90-FF-16-FB-17-44-CF-B4-82-DD-29-14-FF-BC-B6-49-79-@C-@E-58-9E-46-2D-3D 
The "sha256" part was the hash algorithm used. 
the - can be removed or change to lower case 


#convert to lower case hex without '-' 
[System.BitConverter] ::ToString(Shash) .Replace("-","").ToLower() 


#2edfdada56525b1290ff16fb1744cfb482dd2914F fbcb649798c8e589e462d3d 


If base64 format was preferred, using base64 converter for output 


#convert to base64 
[Convert] ::ToBase64String(Shash) 


#Lt /a21ZSWxKQ/xb7FOTPtILdKRT /vLZJeQwOWJ5GLTO= 
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Chapter 69: Signing Scripts 


Section 69.1: Signing a script 
Signing a script is done by using the Set-AuthenticodeSignature-cmdlet and a code-signing certificate. 


#Get the first available personal code-signing certificate for the logged on user 
Scert = @(Get-ChildItem -Path Cert:\CurrentUser\My -CodeSigningCert) [@] 


#Sign script using certificate 
Set-AuthenticodeSignature -Certificate Scert -FilePath c:\MyScript.ps1 


You can also read a certificate from a .pfx-file using: 
Scert = Get-PfxCertificate -FilePath "C:\MyCodeSigningCert.pfx" 


The script will be valid until the certificate expires. If you use a timestamp-server during the signing, the script will 
continue to be valid after the certificate expires. It is also useful to add the trust chain for the certificate (including 
root authority) to help most computers trust the certificated used to sign the script. 


Set-AuthenticodeSignature -Certificate Scert -FilePath c:\MyScript.ps1 -IncludeChain All - 
TimeStampServer "http://timestamp.verisign.com/scripts/timstamp.d11l" 


It's recommended to use a timestamp-server from a trusted certificate provider like Verisign, Comodo, Thawte etc. 


Section 69.2: Bypassing execution policy for a single script 


Often you might need to execute an unsigned script that doesn't comply with the current execution policy. An easy 
way to do this is by bypassing the execution policy for that single process. Example: 


powershell.exe -ExecutionPolicy Bypass -File C:\MyUnsignedScript.ps1 
Or you can use the shorthand: 


powershell -ep Bypass C:\MyUnsignedScript.ps1 


Other Execution Policies: 
Policy Description 
AllSigned Only scripts signed by a trusted publisher can be run. 


Bypass No restrictions; all Windows PowerShell scripts can be run. 

Default Normally RemoteSigned, but is controlled via ActiveDirectory 

RemoteSigned Downloaded scripts must be signed by a trusted publisher before they can be run. 
Restricted No scripts can be run. Windows PowerShell can be used only in interactive mode. 
Undefined NA 


Unrestricted* Similar to bypass 


Unrestricted Caveat: If you run an unsigned script that was downloaded from the Internet, you are prompted for 
permission before it runs. 


More Information available here. 
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Section 69.3: Changing the execution policy using Set- 
ExecutionPolicy 


To change the execution policy for the default scope (LocalMachine), use: 
Set-ExecutionPolicy AllSigned 
To change the policy for a specific scope, use: 
Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy AllSigned 
You can suppress the prompts by adding the -Force switch. 
Section 69.4: Get the current execution policy 
Getting the effective execution policy for the current session: 


PS> Get-ExecutionPolicy 
RemoteSigned 


List all effective execution policies for the current session: 


PS> Get-ExecutionPolicy -List 


Scope ExecutionPolicy 


MachinePolicy Undefined 
UserPolicy Undefined 
Process Undefined 
CurrentUser Undefined 
LocalMachine RemoteSigned 


List the execution policy for a specific scope, ex. process: 


PS> Get-ExecutionPolicy -Scope Process 
Undefined 


Section 69.5: Getting the signature from a signed script 


Get information about the Authenticode signature from a signed script by using the Get-AuthenticodeSignature- 
cmdlet: 


Get-AuthenticodeSignature .\MyScript.ps1 | Format-List * 


Section 69.6: Creating a self-signed code signing certificate 
for testing 


When signing personal scripts or when testing code signing it can be useful to create a self-signed code signing 
certificate. 


Version = 5.0 


Beginning with PowerShell 5.0 you can generate a self-signed code signing certificate by using the New- 
SelfSignedCertificate-cmdlet: 
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New-SelfSignedCertificate -FriendlyName "StackOverflow Example Code Signing" -CertStoreLocation 


Cert:\CurrentUser\My -Subject "SO User" -Type CodeSigningCert 


In earlier versions, you can create a self-signed certificate using the makecert .exe tool found in the .NET Framework 


SDK and Windows SDK. 


A self-signed certificate will only be trusted by computers that have installed the certificate. For scripts that will be 
shared, a certificate from a trusted certificate authority (internal or trusted third-party) are recommended. 
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Chapter 70: Anonymize IP (v4 and v6) in 
text file with PowerShell 


Manipulating Regex for IPv4 and IPv6 and replacing by fake IP address in a readed log file 


Section 70.1: Anonymize IP address in text file 


# Read a text file and replace the IPv4 and IPv6é by fake IP Address 


# Describe all variables 

SSourceFile = "C:\sourcefile.txt" 

SIPv4File = "C:\IPV4.txt" 

SDestFile = "C:\ANONYM. txt" 

SRegex_v4 = "(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})" 

SAnonym_v4 = "XXX.XXX.XXX.XXX" 

$Regex_v6 = "((([@-9A-Fa-f]{1,4}:){7}[@-9A-Fa-f] {1,4}) | (([@-9A-Fa-f] {1,4}:) {6}: [@-9A-Fa- 

£1{1, 4}) | (([@-9A-Fa-f] {1,4} :) {5}: ([@-9A-Fa-f]{1, 4} :)?[@-9A-Fa-f] {1,4}) | (([0-9A-Fa- 

£1{1,4}:) {4}: ([@-9A-Fa-f] {1,4}:) {@, 2} [@-9A-Fa-f] {1,4}) | (([@-9A-Fa-f] {1,4}:) {3}: ([@-9A-Fa- 

£1{1,4}:) {@,3}[0-9A-Fa-f] {1,4}) | (([@-9A-Fa-f]{1, 4} :) {2}: ([@-9A-Fa-f] {1,4}:) {0, 4} [0-9A-Fa- 
#1{1,4}) | (( [@-9A-Fa- 

£1{1,4}:) {6}((b((25[@-5]) | (1d{2}) | (2[@-4]d) | (d{1,2}))b) .) {3} (b( (25[ 0-5] ) | (1d{2}) | (218-41) | (d{1,2}) 
)b)) | (([@-9A-Fa- 

£]{1,4}:) {0,5}: ((b((25[@-5]) | (1d{2}) | (2[@-4]d) | (d{1,2}) )b).) {3} (b((25[8-5]) | (1d{2}) | (2[@-4]d) | (d{1, 
2}))b)) (2 2( [8-9A-Fa- 

#1{1,4}:) {8,5} ((b((25[@-5]) | (1d {2}) | (21 8-4] d) | (d{1,2}))b) .) {3} (b( (25[@-5] ) | (1d{2}) | (2[8-4]d) | (d{1,2 
}))b))| ([@-9A-Fa-f] {1,4}: :([0-9A-Fa-f] {1,4}:){@, 5}[@-9A-Fa-f]{1,4})|(::([@-9A-Fa- 

£141,432) {6,6} [@-9A-Fa-f] 41,44) 1(((0-9A-Fa-f 141, 432)41,742))" 

Yaka Acne AAA PAA AACNA AACA AREA M ALAA AAR AAM ABN AR Mee 

SSuffixName = "-ANONYM." 

SAnonymFile = (SParts[@] + SSuffixName + $Parts[1]) 


# Replace matching IPv4 from sourcefile and creating a temp file IPV4.txt 
Get-Content SSourceFile | Foreach-Object {$_ -replace SRegex_v4, SAnonym_v4} | Set-Content 
SIPv4File 


# Replace matching IPv6é from IPV4.txt and creating a temp file ANONYM.txt 
Get-Content SIPv4File | Foreach-Object {S_ -replace SRegex_v6, SAnonym_v6} | Set-Content SDestFile 


# Delete temp IPV4.txt file 
Remove-Item SIPv4File 


# Rename ANONYM.txt in sourcefile-ANONYM. txt 
$Parts = $SourceFile.Split(".") 
If (Test-Path SAnonymFile) 


{ 
Remove-Item SAnonymFile 
Rename-Item SDestFile -NewName SAnonymFile 
} 
Else 
Rename-Item SDestFile -NewName SAnonymFile 
} 
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Chapter 71: Amazon Web Services (AWS) 
Rekognition 


Amazon Rekognition is a service that makes it easy to add image analysis to your applications. With Rekognition, 
you can detect objects, scenes, and faces in images. You can also search and compare faces. Rekognition’s API 
enables you to quickly add sophisticated deep learning-based visual search and image classification to your 
applications. 


Section 71.1: Detect Image Labels with AWS Rekognition 


$BucketName = '‘trevorrekognition' 
SFileName = ‘kitchen. jpg' 


New-S3Bucket -BucketName SBucketName 
Write-S30bject -BucketName SBucketName -File SFileName 
SREKResult = Find-REKLabel -Region us-east-1 -ImageBucket SBucketName -ImageName SFileName 


SREKResult.Labels 


After running the script above, you should have results printed in your PowerShell host that look something similar 
to the following: 


RESULTS: 


Confidence Name 


86.87605 Indoors 
86.87605 Interior Design 
86.87605 Room 

77.4853 Kitchen 

77 .25354 Housing 
77.25354 Loft 

66.77325 Appliance 
66.77325 Oven 


Using the AWS PowerShell module in conjunction with the AWS Rekognition service, you can detect labels in an 
image, such as identifying objects in a room, attributes about photos you took, and the corresponding confidence 
level that AWS Rekognition has for each of those attributes. 


The Find-REKLabel command is the one that enables you to invoke a search for these attributes / labels. While you 
can provide image content as a byte array during the API call, a better method is to upload your image files to an 
AWS S3 Bucket, and then point the Rekognition service over to the S3 Objects that you want to analyze. The 
example above shows how to accomplish this. 


Section 71.2: Compare Facial Similarity with AWS Rekognition 


$BucketName = 'trevorrekognition' 


### Create a new AWS S3 Bucket 
New-S3Bucket -BucketName SBucketName 


### Upload two different photos of myself to AWS S3 Bucket 


Write-S30bject -BucketName SBucketName -File myphoto1.jpg 
Write-S30bject -BucketName SBucketName -File myphoto2.jpg 
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### Perform a facial comparison between the two photos with AWS Rekognition 
SComparison = @{ 
SourceImageBucket = SBucketName 
TargetImageBucket = SBucketName 
SourceImageName = 'myphoto1.jpg' 
TargetImageName = '‘myphoto2.jpg' 
Region = ‘us-east-1' 
} 
SResult = Compare-REKFace @Comparison 
SResult .FaceMatches 


The example script provided above should give you results similar to the following: 


Face Similarity 


Amazon.Rekognition.Model.ComparedFace 90 


The AWS Rekognition service enables you to perform a facial comparison between two photos. Using this service is 
quite straightforward. Simply upload two image files, that you want to compare, to an AWS S3 Bucket. Then, invoke 
the Compare-REKFace command, similar to the example provided above. Of course, you'll need to provide your own, 
globally-unique S3 Bucket name and file names. 
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Chapter 72: Amazon Web Services (AWS) 
Simple Storage Service (S3) 


Parameter Details 
BucketName The name of the AWS S3 bucket that you are operating on. 


The name of the built-in (pre-defined) Access Control List (ACL) that will be associated with the 
S3 bucket. 


File The name of a file on the local filesystem that will be uploaded to an AWS S3 Bucket. 


CannedACLName 


This documentation section focuses on developing against the Amazon Web Services (AWS) Simple Storage Service 
(S3). S3 is truly a simple service to interact with. You create S3 "buckets" which can contain zero or more "objects." 

Once you create a bucket, you can upload files or arbitrary data into the S3 bucket as an "object." You reference S3 
objects, inside of a bucket, by the object's "key" (name). 


Section 72.1: Create a new S3 Bucket 


New-S3Bucket -BucketName trevor 


The Simple Storage Service (S3) bucket name must be globally unique. This means that if someone else has already 
used the bucket name that you want to use, then you must decide on a new name. 


Section 72.2: Upload a Local File Into an S3 Bucket 


Set-Content -Path myfile.txt -Value ‘PowerShell Rocks’ 
Write-S30bject -BucketName powershell -File myfile.txt 


Uploading files from your local filesystem into AWS S3 is easy, using the Write-S30bject command. In its most 
basic form, you only need to specify the -BucketName parameter, to indicate which S3 bucket you want to upload a 
file into, and the -File parameter, which indicates the relative or absolute path to the local file that you want to 
upload into the S3 bucket. 


Section 72.3: Delete a S3 Bucket 


Get-S30bject -BucketName powershell | Remove-S30bject -Force 
Remove-S3Bucket -BucketName powershell -Force 


In order to remove a S3 bucket, you must first remove all of the S3 objects that are stored inside of the bucket, 
provided you have permission to do so. In the above example, we are retrieving a list of all the objects inside a 
bucket, and then piping them into the Remove-S30bject command to delete them. Once all of the objects have 
been removed, we can use the Remove-S3Bucket command to delete the bucket. 


Goalkicker.com - PowerShell® Notes for Professionals 173 


Credits 


Thank you greatly to all the people from Stack Overflow Documentation who helped provide this content, 
more changes can be sent to web@petercv.com for new content to be published or updated 


Adam M. Chapter 23 

ajb101 Chapter 51 

Alban Chapter 25 

Andrei Epure Chapter 28 

ANIL Chapter 52 

Anthony Neace Chapters 3 and 8 

AP. Chapter 69 

Austin T French Chapter 17 

autosvet Chapters 1, 2 and 20 
Avshalom Chapter 24 

Bert Levrau Chapters 12, 27 and 43 
boeprox Chapter 13 

Brant Bobby Chapters 1, 13, 19 and 58 
briantist Chapters 17 and 67 
camilohe Chapter 27 

Chris N Chapters 1 and 11 
Christophe Chapter 53 
Christopher G. Lewis Chapter 7 

Clijsters Chapters 1, 3 and 26 
CmdrTchort Chapters 7 and 57 
DarkLite1 Chapters 1 and 22 
Dave Anderson Chapter 22 

DAXaholic Chapters 1 and 7 
Deptor Chapter 25 

djwork Chapter 11 

Eris Chapters 2, 7 and 27 
Euro Micelli Chapter 5 

Florian Meyer Chapters 10 and 60 
FoxDeploy Chapter 1 

Frode F. Chapters 7, 8, 9, 13, 15, 21, 28, 29, 32, 35, 38, 39, 40, 62, 66 and 69 
Giorgio Gambino Chapter 29 

Giulio Caccin Chapter 55 

Gordon Bell Chapters 1 and 3 

Greg Bray Chapter 1 

HAL9256 Chapter 30 

It Chapter 1 

ames Ruskin Chapters 12, 25 and 54 
Jaqueline Vanek Chapter 13 

jimmyb Chapter 23 

NYRanger Chapter 1 

PBlanc Chapter 3 

jumbo Chapters 7, 8, 19, 27, 33, 34, 38 and 42 
Keith Chapter 25 

Kolob Canyon Chapter 15 

Lachie White Chapter 63 

Liam Chapters 2 and 6 
Lieven Keersmaekers Chapter 29 


Goalkicker.com - PowerShell® Notes for Professionals 174 


lloyd 

Luke Ryan 
Madniz 

Mark Wragg 
Mathieu Buisson 
mattnicola 


megamorf 
Mert Gulsoy 


Mike Shepard 
miken32 


Moerwald 
motcke 

Mrk 

Nikhil Vartak 


Noo 


Poorkenny 
Prageeth Saravanan 


Ranadip Dutta 


RapidCoder 
Raziel 


restless1987 
Richard 
Roman 

Rowshi 

Sam Martin 
Schwarzie2478 
SeeuD1 
ShaneC 
StephenP 
Steve K 
TessellatingHeckler 


thirdey3 
Thelncorrigible1 


tjrobinson 
TravisEz13 
Trevor Sullivan 
Venkatakrishnan 
VertigoRay 
void 

vonPryz 
W1MOR 
Xalorous 
Xenophane 
xvorsx 
xXhRQ8sD2L7Z 
YChi Lu 


Goalkicker.com - PowerShell® Notes for Professionals 


Chapter 6 

Chapter 12 

Chapter 39 
Chapters 1, 3 and 56 
Chapters 1 and 11 
Chapters 26 and 39 


Chapters 11, 22 and 24 


Chapter 13 
Chapter 14 
Chapter 6 
Chapters 19 and 24 
Chapter 17 
Chapter 1 

Chapters 12 and 41 
Chapters 23 and 70 


Chapters 1, 43 and 44 
Chapters 2, 16 and 47 
Chapters 10, 13, 21 and 67 


Chapter 54 
Chapter 64 
Chapters 2 and 9 


Chapters 7, 12, 26, 29 and 49 
Chapters 7, 19 and 65 


Chapter 29 


Chapters 1, 24, 30, 45, 59 and 66 


Chapter 58 
Chapter 7 
Chapter 24 
Chapter 7 
Chapter 2 
Chapters 7 and 12 
Chapter 1 
Chapter 7 
Chapter 1 


Chapters 1, 4, 5, 6, 8, 10, 12, 14, 21, 26, 36 and 48 
Chapters 14, 18, 50, 61, 71 and 72 


Chapter 31 
Chapters 7 and 46 
Chapter 9 
Chapter 1 
Chapter 37 


Chapters 1, 12 and 40 


Chapter 17 
Chapter 13 
Chapter 21 
Chapters 30 and 68 


Was) 


ae i AOSN me Bes 
Fra mework otes for Professionals jotes for Professionals 


Notes for Professionals 


100+ pages 


GoalKicker.com 


C++ 


Notes for Professionals Notes for Professionals Notes for Professionals 


700+ pages 600+ pages 900+ pages 


Goalkicker.com 


JavaScript PHP Python 


Notes for Professionals 


Notes for Professionals Notes for Professionals 


400+ pages 400+ pages 700+ pages 


